Português: veja a seção no fim.

feathertune hosts a web page it does not control, so the boundary between that page and the app matters. The model is in docs/DESIGN.md (the page may only call player_state, audio_facts and mix_open, with validated payloads).

Please do not open a public issue for a security problem. Use GitHub's private reporting instead: the Security tab of the repository, then Report a vulnerability.

Useful things to include: the version (the installer's file name or the release you installed), what you did, what you expected and what happened. Anything that lets the page, a lyrics source or another site run an action in the app, read local files or reach the credentials is in scope.

This is a personal project with no formal support: I read reports as soon as I can, but there is no guaranteed response time.

Supported version: the latest release (the app updates itself).

Não abra uma issue pública para falha de segurança. Use o relato privado do GitHub: aba Security do repositório, depois Report a vulnerability. Informe a versão, o que você fez, o que esperava e o que aconteceu. É um projeto pessoal sem suporte formal: leio os relatos assim que puder, sem prazo garantido. A versão suportada é a última (o app se atualiza sozinho).