Please don't open a public issue for security problems. Use GitHub's private vulnerability reporting on this repo instead (Security tab → "Report a vulnerability"), and I'll take a look.

This is a small solo utility. I aim to acknowledge reports within a few days, but there's no SLA — it's a side project.