Report security issues privately through GitHub Security Advisories. Do not post API keys, Steam credentials, game binaries, memory dumps, or private paths in a public issue.

SpaceSim Localizer rejects unknown hashes and changed PE-reference fingerprints. Official builds are published only through this repository's Releases page with SHA256SUMS.txt. The project is currently unsigned, so Windows SmartScreen may show a reputation warning.