TimerButton is a UI component and does not perform networking, authentication, cryptography, storage, or background scheduling.
For vulnerabilities or suspicious behavior, open a private GitHub security advisory if available, or contact the maintainer through the repository owner profile.
Do not use TimerButton as the only enforcement mechanism for OTP cooldowns, billing windows, auth lockouts, or retry limits. Store authoritative rules in your ViewModel, repository, or backend.