Security fixes will target the latest published release and the current main branch.

Please use GitHub's private vulnerability reporting for this repository instead of opening a public issue. Include the affected browser, reproduction steps, impact and any suggested mitigation. Reports will be acknowledged as soon as practical and kept private until a fix is available.

Schedule Viewer has no application backend and does not upload personal configurations, but import parsing, local storage, backup archives, Service Worker updates and third-party browser dependencies remain security-sensitive surfaces.