This is a client-side Unity package; it performs no networking and stores no credentials. Still, if you find a security issue (e.g. something exploitable in a game that embeds the package), please report it privately via GitHub's private vulnerability reporting.

Please include a description, reproduction steps, and the package version. You can expect an acknowledgement within a week. Please don't open a public issue for security reports before the fix ships.

There is no bug bounty program.