Please report security problems privately through GitHub's "Report a vulnerability" feature on this repository's Security tab. Do not open a public issue for a vulnerability.

We aim to acknowledge reports within a week.

The game is a single-player application with no accounts and no server. Areas of particular interest are the handling of mod files (which must be data only, with sanitised SVG), save files and imported files.

Until 1.0.0, only the latest release is supported.