0.1.x
If you discover a security issue in Munack, report it privately before public disclosure.
- Munack does not upload project source code
- Munack only queries public registries for package existence
- Gumroad verification uses public license verification inputs only
- No seller secrets should be committed or bundled