Only the latest official release receives active security patches:

We take the security and privacy of AnywhereDesign users extremely seriously. Because AnywhereDesign operates under a strict Local-First Manifesto where code and tokens remain on the user's local workstation, any potential exposure, buffer overrun, or websocket elevation of privilege is treated with maximum urgency.

Please DO NOT open a public GitHub issue for security vulnerabilities.

Instead, please send an encrypted or direct email to our security officer: 📧 max.j.vargas@hotmail.com

Please include:

1. A description of the vulnerability and its potential impact.
2. Step-by-step reproduction instructions or a minimal Proof of Concept (PoC).
3. The affected environment (Windows version, Node.js runtime, browser).

• Initial Response: Within 24 hours acknowledging receipt.
• Triage & Reproduction: Within 72 hours with an initial severity assessment.
• Patch Release: Security patches will be prioritized and delivered via GitHub Releases with credit to the researcher (if desired).

Thank you for helping keep AnywhereDesign and the developer community secure!