Vendo renders agent-generated UI in a sandboxed iframe and executes tools against host APIs — security reports are taken seriously.

Email security@vendo.run. Do not open a public issue. You'll get an acknowledgement within 48 hours.

The latest published minor version of each @vendoai/* package.