This project is a 100% offline, standalone desktop application. It does not connect to the internet, does not use a database, and does not transmit any data outside the local machine.

However, if you discover a security issue (e.g., a vulnerability in how PDF files are parsed, or in the executable packaging), please do not open a public GitHub issue.

Instead, report it privately by:

1. Opening a GitHub Security Advisory on this repository (preferred).
2. Or emailing the repository owner directly via the contact on their GitHub profile.

Please include:

• A description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested mitigations (if known)

We aim to acknowledge your report within 7 days and aim to release a fix within 30 days for confirmed vulnerabilities.

Runtime dependencies and their licenses:

Developer-only (not shipped in the .exe runtime):

We recommend keeping dependencies up to date. Run pip install -r requirements.txt --upgrade to update runtime dependencies.