For a potential secret exposure, unsafe import or save-loss vulnerability, avoid posting private backups or exploit details in a public issue. Use the repository's GitHub private vulnerability reporting feature when it is enabled. Otherwise open a minimal issue asking the maintainer for a private reporting route, without sensitive details.

Never attach a complete real-player database. A small synthetic reproduction is preferable. The game is static: solutions ship to the browser and scores are not tamper-resistant.