If you believe you have found a security or privacy issue in this app, report it privately.

• email: devs@put.io

If you are unsure whether something is sensitive, email first instead of opening a public issue.

Useful reports usually involve:

• OAuth token or session exposure in code, logs, tests, or evidence captures
• unsafe handling of the secure token store or the debug client override
• request or response handling that leaks account data or file contents
• unsafe workflow, release, or signing guidance

Please do not run tests against accounts you do not own.