This is an educational project and has not been independently audited.

Please report vulnerabilities privately through GitHub's private vulnerability reporting. Do not open a public issue, and never include real passwords or vaults in a report.

You can expect an acknowledgement within 7 days and an assessment within 30 days.