这是一个纯前端的单机网页游戏，没有账号、服务端和用户数据，攻击面很小。如果你发现了安全问题（例如构建或发布流程中的供应链风险、泄露的凭据），请不要公开提 issue， 而是通过 GitHub 的 Security → Report a vulnerability（私密安全报告）联系维护者。

我们会尽快确认并回复。

This is a client-only browser game with no accounts, server or user data, so the attack surface is small. If you find a security problem (for example a supply-chain risk in the build or release pipeline, or a leaked credential), do not open a public issue. Use GitHub's private Security → Report a vulnerability form instead.