MorseStudio runs entirely on-device with no network requests, no backend, and no user accounts. The attack surface is minimal.

If you find a security issue, do not open a public issue. Instead, email the maintainer directly or use GitHub's private vulnerability reporting.

Include:

• A description of the vulnerability
• Steps to reproduce
• Potential impact

You'll get a response within 72 hours.