TypeOpen is pre-1.0. Security fixes are applied to the latest release on main.

Please use GitHub's private vulnerability reporting for the TriHerm/TypeOpen repository when available. Do not open a public issue containing exploit details, credentials or sensitive local files.

Include the affected TypeOpen version, macOS version, reproduction steps and the security impact. Reports involving file access, renderer-to-main IPC, navigation, export rendering or document-package path handling are especially useful when they include a minimal test file.

Security reports and contributions must not attach proprietary reference binaries, decompiled proprietary code, private assets, license material or raw reverse-engineering databases. A minimal behavioral description or independently created reproduction is sufficient.