Only the latest release gets security fixes. Older builds are not patched — grab the current DMG from Releases.

Use GitHub's private vulnerability reporting: Security tab → Report a vulnerability.

Please don't open a public issue for an exploitable bug — a private report gives me a chance to ship a fix first.

CrateDigger is a solo-maintained app, so expect a human-speed reply (days, not hours). Include the version, macOS version, and steps to reproduce.