Security fixes target the latest published release and the current main branch.

Please use GitHub private vulnerability reporting when it is available. If it is not available, contact the maintainer through the GitHub profile before disclosing sensitive details publicly.

Do not include access tokens, private session data, local Codex logs, .env contents, or personally identifying paths in a public issue. Non-sensitive compatibility bugs may be filed normally.

This project is an unofficial user-level runtime patch. It does not replace the security support channels for Codex, OpenAI services, VPN software, or Windows.