Please email chicks.net@gmail.com with a subject line like "$REPONAME SECURITY issue: $SUMMARY". Details on when you experienced the issue, logs, and other context are appreciated to assist with effective triaging of your issue.
End users should expect new releases to include any security updates and there should be a notification in the release notes. We may participate in other disclosure programs as circumstances may warrant.
There are no known security vulnerabilities in the software at the time this was written.
There is a risk of disclosing credentials, but we have mitigated that risk by storing all credentials in 1Password and minimizing the local lifetime of those credentials.