Studio is a server on your machine: it reads and writes your projects and keeps the keys of the media services you connect. It listens on 127.0.0.1 only, and answers the CLI and its own pages with a key it makes at launch.

Please report a vulnerability privately, not in a public issue: on GitHub, under Security → Report a vulnerability in this repository, or by email to support@openfilm.dev. Say what you found, how to reproduce it, and which version (setpiece --version). You will hear back within a few days, and we will tell you when a fix is released. We credit reporters who want to be named.

Supported: the latest release on npm.