VCardiff processes private contact exports locally. Do not attach a real VCF or generated report to a public issue.

For a vulnerability, use GitHub's private Report a vulnerability form for this repository and include the smallest synthetic reproducer possible. Version 0.1.x receives security fixes while it is the latest released line.

The project performs no network access, but its input and generated reports may contain PII. Users are responsible for storage permissions, retention, and secure deletion appropriate to their environment.