Security fixes are considered for the latest code on the default branch.

Please do not disclose vulnerabilities in public issues or pull requests.

Use GitHub's Report a vulnerability option in the repository's Security tab to submit a private vulnerability report. Include the affected file or component, reproduction steps, impact and any suggested mitigation.

If private vulnerability reporting is unavailable, contact the repository owner through https://github.com/Aaqibhafeezkhan and request a private channel. Please allow time for investigation and a fix before public disclosure.

NoCodeComments is designed to process source code locally in the browser. Reports involving unexpected source-code disclosure, unsafe file handling, script injection, or dependency/supply-chain risks are especially relevant.