Security

Responsible reporting for this personal development site.

Last updated July 13, 2026.

Report a vulnerability

Email [email protected] with the subject “Security report.” Include the affected URL or component, a concise description, reproducible steps, and the impact you observed. Redact credentials, personal data, and unrelated records.

Safe testing

Please use only accounts and data you control. Do not perform denial-of-service testing, destructive actions, automated high-volume scanning, social engineering, persistence, or attempts to access another person’s information. If you encounter private data, stop testing, preserve the minimum evidence needed, and report it.

Response expectations

This is a personal project rather than a commercial bug-bounty program, and no payment is promised. A reasonable effort will be made to acknowledge actionable reports, investigate them, and communicate when a correction is available.

Unsupported downloads

The legacy Meowrito and UE artifacts are not supported security releases. Their current files are unsigned or debug-signed, lack reproducible source/build provenance, and have known security limitations. Do not install them or provide credentials to them.

Contact hygiene

Never send a password, API token, session cookie, private key, full database export, or unnecessary personal information in a report. Begin with a redacted description so a safer transfer method can be arranged if evidence is required.