Please report security vulnerabilities privately through GitHub's security advisory feature for this repository. Do not open a public issue containing an unpatched vulnerability, private key, subscription library, or other sensitive user data.

Include the affected version or commit, reproduction steps, impact, and any suggested mitigation. FeedLizard does not need real Nostr keys, OPML libraries, or payment information to reproduce a report; use synthetic data.

Only the current development branch is supported before the first stable release. Security fixes will be documented when a public release process is established.