The latest release on the main branch is supported. Older tags receive fixes at the maintainer's discretion.

Report security issues to [email protected]. Do not open a public issue for a vulnerability.

Please include: the affected component, steps to reproduce, and the impact you expect. You will get an acknowledgement within 5 business days and a fix plan or an explanation for why the report is not treated as a vulnerability.

This project is a local, offline analysis tool by default. If you find any code path that sends data over the network without the user asking for it, that is a security bug; report it.