This repository includes the ScreenX public website, release downloads, and update metadata endpoints.

Security fixes are handled on the default branch first. Production deployments should be redeployed from the latest fixed commit.

Do not commit .env, .env.local, Vercel credentials, notarization secrets, or Apple account credentials. Use .env.example as a list of required names only.

Please do not open a public issue for a vulnerability or for a report that includes credentials, tokens, private user data, or unreleased signing details.

Use GitHub's private vulnerability reporting or contact the maintainer through the SyntaxFear GitHub profile. Include:

• What you found
• Steps to reproduce it
• Whether it affects the website, download flow, or update feed
• Any logs or screenshots with private data removed

The maintainer will confirm receipt, investigate, and coordinate a fix before public disclosure.