Only the latest release on main is actively supported.

Please do not open a public issue for security problems. Email the maintainer directly at sunritbiswas9@gmail.com with:

• A description of the vulnerability
• Steps to reproduce (if possible)
• Affected component/version
• Suggested fix (optional)

You will receive a response within 5 business days. Please allow time for the issue to be addressed before disclosing it publicly.

• Authentication uses bcrypt password hashing and short-lived JWTs.
• Secrets are never committed; all credentials are loaded from environment variables.
• AI answers are grounded in a curated knowledge base, and the service falls back to search rather than leaking private data.
• Chat history is scoped to the authenticated account.