There are no releases yet. Only main is maintained.

Report a vulnerability privately to hello@orbyn.dev, or through GitHub private vulnerability reporting. Do not open a public issue for it.

Include the affected commit, the platform, a minimal reproduction with synthetic data, and what an attacker can do. Never attach real credentials or personal data. No response time is promised.