The repository is public. Do not include vulnerability details in a public issue or discussion. Use GitHub's private vulnerability reporting form when it is enabled; otherwise open a minimal public issue asking maintainers for a private reporting channel without including sensitive details.

Do not include tokens, cookies, private server addresses, coordinates, or unredacted personal information.

Relevant concerns include unexpected file or network access, unsafe configuration handling, behavior outside local particle rendering, and release artifacts that do not match tagged source.

Server-rule approval is a policy decision, not a security guarantee. FPS Tune remains disabled by default.