These apps can hold powerful macOS permissions (Accessibility, Input Monitoring, Screen Recording, microphone), so security reports are taken seriously.

Use GitHub's private reporting: open the Security tab of the affected repository and choose Report a vulnerability. Please do not post details in a public issue.

If the repository has no such button, open an issue that says only that you have a security report, with no details, and a private channel will be arranged.

This is a one-person project. Reports are read as soon as possible, but there is no guaranteed response time. A fix ships in the next version of the app, and you are credited unless you prefer otherwise.

Only the latest release of each app is supported.