Security fixes are currently applied to the newest available prerelease version of RightClick Wrangler. Version 0.9.3 is the current repository baseline.

Use GitHub's Report a vulnerability / private security advisory feature for issues that could:

• remove or corrupt protected Windows associations;
• execute an unintended command;
• bypass the application's protected-entry policy;
• expose credentials, private paths, or sensitive command arguments;
• write outside the expected per-user or application locations;
• permit unsafe restoration or deletion of registry data.

Do not place exploit details, registry payloads, personal data, or weaponized proof-of-concept code in a public issue before a fix is available.

RightClick Wrangler is a Windows Shell and registry management utility. It is intentionally designed around reversible per-user operations, explicit ownership, protected registrations, and backups. Review SECURITY-NOTES.md for implementation-specific safeguards and limitations.

Never commit code-signing certificates, .pfx files, private keys, GitHub tokens, passwords, or exported registry files containing private application data. The repository .gitignore blocks common forms, but contributors remain responsible for checking commits before pushing.