This is a small static React app deployed through GitHub Pages. The app runs entirely in the browser and does not operate a custom backend.

Security reports are still welcome for issues such as:

• Dependency vulnerabilities with a realistic impact.
• Unsafe rendering or injection risks.
• Supply-chain or deployment configuration problems.
• Exposure of secrets or private information.

Please do not open a public issue for a suspected security vulnerability.

Instead, use GitHub's private vulnerability reporting if it is available for this repository, or contact the maintainer through the support route in SUPPORT.md.

Include:

• A clear description of the issue.
• Steps to reproduce.
• Potential impact.
• Any suggested fix, if you have one.

Maintainers will review reports as time allows. If the issue is confirmed, the fix will usually be handled in a normal pull request unless the details need to remain private until release.

The following are usually out of scope:

• Reports that only affect unsupported browsers or local developer machines.
• Social engineering.
• Vulnerabilities in third-party services that this project merely links to.
• Automated dependency reports without an exploit path or project-specific impact.