Report a suspected vulnerability through GitHub private vulnerability reporting. Include the affected revision, component, and reproduction steps using a fabricated notebook. Please give the maintainer time to investigate privately before disclosing a security issue publicly.

Do not put personal notebooks, imported documents, signing material, credentials, or private logs in public issues or pull requests. Use fabricated content for reproductions. Revoke or rotate any exposed credentials through the relevant provider.

This repository version has no accounts or cloud backend. Imported files, local persistence, browser drafts, document rendering, and exports remain relevant security surfaces.

This personal project receives updates as the maintainer has time. Use the latest default-branch revision; no long-term support or response-time commitment is provided. Dependency alerts, secret scanning, push protection, and private vulnerability reporting are enabled on the GitHub repository. CodeQL scans browser JavaScript and TypeScript and the GitHub workflows.