Report vulnerabilities privately to operatornest+security@gmail.com. Include the affected version, transport, minimal reproduction and potential impact. Remove credentials and personal information. Do not publish exploit details in an issue before maintainers can assess the report.

Security fixes target the latest 1.x release. These tools calculate from supplied inputs and bundled data. They do not require API keys, read calendars, send invitations or install schedules. Self-hosted HTTP operators should configure the optional rate limiter for their traffic.