Security fixes are provided for the latest version on the main branch.

Please use GitHub's Report a vulnerability private reporting flow for this repository. Do not open a public issue for vulnerabilities involving disk selection, command construction, privilege boundaries, path handling, or destructive writes.

Include:

• A concise description and impact.
• A safe reproduction that does not destroy real data.
• Affected macOS and app versions.
• Suggested mitigation, if known.

Do not include passwords, access tokens, private files, or full device serial numbers. The maintainer will acknowledge a valid report and coordinate a fix before public disclosure.