Report vulnerabilities privately through this repository's Security tab by opening a private vulnerability report. Do not include API keys, private-account data, or sensitive search terms in public issues.

The latest tagged release and the current main branch are supported. The service handles public X identifiers and content only; it does not accept X account credentials from callers. Self-hosted operators who configure their own X sessions or an admin token are responsible for keeping those secrets out of version control and public logs.