Relay is a personal project, but I still want security reports handled carefully. Relay 0.2.x receives best-effort security fixes. Report vulnerabilities privately through the GitHub repository's security advisory feature; do not include sensitive source files in a public issue.

Relay parses untrusted text but does not execute, import, compile, or upload it. Keep analysis offline. A Relay report is advice, not permission to deploy control code to physical machinery.