Security and privacy are taken very seriously.

• If you discover a vulnerability or potential exploit, please do not open a public issue.
• Instead, submit a report via GitHub Security Advisories or contact the maintainer directly through GitHub.
• Please include:
  1. A clear description of the vulnerability.
  2. Steps to reproduce or proof-of-concept code.
  3. Affected component (e.g., IPC named pipes, updater checksum, EC driver).

We will investigate promptly and release a patched version as soon as possible.