Scan2Sketch is beta software. Supported security fixes target the latest source version on the default branch.

Please do not publish a vulnerability report containing private scans, machine paths, tokens or other secrets. Open a minimal GitHub security advisory for the repository when possible. If that is unavailable, open an issue requesting a private contact channel without disclosing exploit details.

Model downloads in the installation helper are pinned to upstream URLs and verified with SHA-256. Reports about a changed upstream file, unsafe archive, unexpected network access or command execution are especially important.