For what the server can see, what one participant can learn about another, and safer deployment guidance, read the security and privacy model. In particular, Jaynshare is a trusted intermediary: the server can read and alter routed traffic, and is not a security boundary against its operator.

Only the latest release receives security fixes.

Report suspected vulnerabilities privately through this repository's Security tab — Report a vulnerability — which opens a private advisory visible only to the maintainers.

Do not open a public issue, and do not include secrets, tokens, prompts, audit records or infrastructure addresses in a report. A description of the weakness, the affected version or commit, and how to reach it is enough; we will ask if we need more.

Reports are answered on a best-effort basis: no response or fix deadline is guaranteed. Please keep a report confidential until a fix is released; credit is given if you want it.