sketchtune is pre-1.0, so only the most recent release receives fixes.

sketchtune only reads and writes local files, so the attack surface is small — but if you do find something, please report it privately rather than opening a public issue.

Use GitHub's private vulnerability reporting or message @06mia. I'll aim to acknowledge within a few days and keep you posted on a fix.