CmdIME is early software. Security fixes target the latest public release and the main branch.

Please report security issues privately when possible through GitHub Security Advisories for this repository. If private reporting is not available, open a minimal public issue that describes the affected area without exploit details, secrets, or personal data.

Useful details include:

• CmdIME version and install method
• macOS version and hardware architecture
• Whether the issue affects permissions, input monitoring, config files, or release packaging
• Reproduction steps that avoid exposing sensitive data

We will acknowledge valid reports and coordinate a fix before publishing details.