Yap is research-grade software in early (0.x-alpha) development. Only the latest published alpha and the current main are supported; there are no backports to older versions.
Please do not open a public issue for security problems.
Report privately through GitHub's Report a vulnerability button (repository Security tab → Report a vulnerability). This opens a private advisory visible only to the maintainer.
Response is best-effort — this is a personal project — but every report will be reviewed, and responsible disclosure is appreciated.