Found a security issue? Please report it privately — email fred@abode.fyi instead of opening a public issue, so it can be fixed before it's public.

Helpful to include: what the issue is, how to reproduce it, and the impact. Please redact any real secrets.

No live secrets live in this repo — real credentials are only in untracked .env* files (see .env.example). If you think one was committed, flag it privately so it can be rotated.