Answers: how to report a security problem in ipq.
ipq's tool reads and writes files under docs/, and runs only the commands a
project lists in docs/ipq.json. It sends nothing over the network.
To report a vulnerability, use GitHub's private vulnerability reporting: the Security tab of this repository, then Report a vulnerability. Please don't open a public issue for a security problem.