This project is pre-1.0 and under active development. Only the latest commit on main is supported.

Please do not open a public issue for security vulnerabilities.

Instead, use GitHub's private vulnerability reporting: go to the repository's Security tab and click Report a vulnerability.

You can expect an initial response within a few days. Please include:

• a description of the issue and its impact,
• steps to reproduce, and
• any suggested remediation.

This app stores third-party credentials (Google Translate API key, Bluesky / Mastodon / Threads tokens, and cookie sessions). They live in .env and data/credentials/, both of which are gitignored. If you believe a credential was ever committed, rotate it immediately and report it.