The mod is a single dinput8.dll that the game loads from its bin\win_x64\ folder. It hooks the game's DirectX 11 and
OpenXR calls. It does not go online, has no account and collects nothing. It only writes files next to the game:
dlaa.ini, dlaa_inject.log, the shader cache folder dlaa_shader_cache\, and test captures when you press a capture key.
Download the mod only from the Releases page.
A dinput8.dll from anywhere else can be anything.
The DLL is not code-signed. Some antivirus programs flag DLLs that hook a game. If yours does, check that the file came from the Releases page. You can also build it yourself from this source (see Build from source).
The mod never ships NVIDIA's nvngx_dlss.dll. Get that file from a trusted source (for example NVIDIA or your own
games).
Only the newest release and the newest pre-release get fixes.
Do not put the details of a security problem in a public issue.
Open an issue with the title Security contact and no details. I answer there and we move to a private channel.
For normal bugs, crashes and performance problems, open a normal issue.