PhysicsSims is currently in active development. Security updates are applied to the latest version of the project.

Please do not report security vulnerabilities through public GitHub issues.

If you discover a vulnerability, report it privately by contacting the maintainer or using GitHub's private vulnerability reporting if enabled.

Include as much detail as possible:

• A clear description of the issue
• Steps to reproduce it
• The affected page, feature, or component
• Expected vs actual behavior
• Browser/device information if relevant
• Screenshots or logs if useful

Security issues may include:

• Cross-site scripting or unsafe HTML rendering
• Malicious input causing crashes or unexpected behavior
• Unsafe file import/export behavior
• Dependency vulnerabilities
• Issues that could expose project files

The following are generally not considered security vulnerabilities:

• Physics calculation mistakes
• UI bugs with no security impact
• Browser compatibility issues
• Performance issues without a security impact
• Issues caused by modified local copies of the project

Reports will be reviewed as soon as possible. If the issue is valid, a fix will be prioritized and released in the latest version.

Thank you for helping keep PhysicsSims safe.