The master branch is the only supported development line.

Please do not open a public issue for a suspected vulnerability.

Report the issue privately to the repository maintainers with:

• A short description of the problem.
• Steps to reproduce it.
• The affected browser, dependency, or configuration if known.
• Any suggested mitigation.

This project is currently frontend-only, so security reports will usually involve dependency vulnerabilities, unsafe browser behavior, or repository configuration.