GradientSpector is a static data and CSS project. It does not operate an account system, backend, or hosted API, but reports about repository code and release files are still welcome.

Please do not disclose an exploitable issue in a public issue. Use GitHub's private vulnerability reporting feature when it is enabled.

• a short description and affected file or release;
• reproduction steps or a minimal proof of concept;
• the potential impact; and
• any suggested mitigation.

You should receive an acknowledgement within seven days. We will coordinate disclosure timing with the reporter and credit them unless they request anonymity.

Examples of in-scope reports include malicious changes to build scripts, unsafe parsing of contributor-controlled data, release artifacts that execute code unexpectedly, or accidental exposure of private credentials. Cosmetic CSS issues and incorrect gradient values should be reported as regular issues instead.

Do not include real secrets or personal data in an issue, pull request, or reproduction fixture.