The latest released 1.x line receives security fixes.
Please do not open a public issue for security problems. Instead, email the maintainer at hello@albertoarena.it with a description of the issue and a way to reproduce it. You can expect an acknowledgement within a few days, and a fix or mitigation plan once the report is confirmed.
Truss exposes database structure only (tables, columns, indexes, foreign keys) and never queries or
renders row data. Access is protected by the fixed viewTruss gate, which is consulted in every
non-local environment and returns 404 on denial. Reports about structure leaking as data, the gate
being bypassed, or the asset route serving unintended files are all in scope.