If you find a security problem in regproof, please report it privately rather than in a public issue.

Use the Report a vulnerability button on the Security tab. Only the maintainer can see what you send.

Include what you found, how to reproduce it, and what you think the impact is. I aim to reply within a week.

This is a personal project, so there is no bounty and no guaranteed fix time, but a real problem will be taken seriously and credited if you want.