The package works offline, without telemetry, network requests, shell execution or executable character loading. Rendering removes unsafe terminal controls; explicit color mode permits SGR styling.

Use GitHub Security → Report a vulnerability if available, or contact a maintainer privately through their GitHub profile. Include affected version, reproduction and impact; do not post credentials or exploit details in public issues. No response-time guarantee is promised.

The 0.3 feature branch is an unreleased candidate. Visual output is not a machine-readable protocol or security boundary; use JSON for automation.