DevCrate is a client-side developer utility app — it doesn't have a backend, doesn't store user data, and doesn't handle authentication. That said, if you find a security issue (e.g. an XSS vector in one of the tools, a malicious dependency, or unsafe handling of user-pasted input), please report it responsibly.

Do not open a public issue for security reports.

Instead, email kohariaakif@gmail.com with:

• A description of the issue and its potential impact
• Steps to reproduce
• Any relevant PoC code or screenshots

You should get an acknowledgment within 3–5 days. Once confirmed, a fix will be prioritized and you'll be credited in the release notes (unless you prefer to stay anonymous).

Only the latest version on the main branch is supported.