Only the version deployed at transfergit.com (tracking the main branch) is supported. There are no other maintained releases.

Please do not open a public issue for security reports. Instead, use GitHub Security Advisories to report privately.

You should receive an initial response within 72 hours. We'll keep you updated as the issue is triaged and fixed, and credit you in the advisory unless you'd prefer to stay anonymous.

In scope:

• The production app at transfergit.com
• The code in this repository

Out of scope:

• Rate limiting behavior of the underlying GitHub API
• Self-hosted / forked instances of this project

Thanks to everyone who takes the time to responsibly report issues — it's genuinely appreciated.