Security Policy

Supported Versions

PicForge is pre-1.0. Security fixes target the current main branch and the latest GitHub release.

Reporting A Vulnerability

Please do not open a public issue for a security report. Use GitHub private vulnerability reporting if it is enabled for the repository, or contact the maintainer through the GitHub profile linked in the repository.

Include:

• Affected version or commit.
• Browser and operating system.
• Steps to reproduce.
• Impact and any suggested mitigation.

Privacy Model

PicForge processes images locally in the browser. The app does not require accounts, server-side image processing, or analytics to compress files. Contributors should preserve this model.