Security and user trust are core requirements for Farsio products.

Do not publish sensitive vulnerability details in a public issue.

When private vulnerability reporting is available, use the repository Security tab. Otherwise, create a minimal public issue requesting a private contact channel without including exploit steps, credentials, secrets or personal data.

Useful reports include unauthorized data access, unsafe extension permissions, injection, credential exposure, supply-chain issues and release-integrity problems.