Only the latest version on the main branch receives security fixes.

Please do not report vulnerabilities in public issues.

Use GitHub's private vulnerability reporting feature for this repository when available. If it is not available, contact the repository owner through the GitHub profile linked from the repository.

Include:

• A clear description of the issue.
• Steps to reproduce it.
• The affected browser, platform, or deployment context.
• Any proof of concept that helps confirm the impact.

This project is a client-side PWA with no backend. Most relevant security issues are expected to involve dependency vulnerabilities, build configuration, unsafe browser APIs, service-worker caching behavior, or accidental exposure of local data.