Report suspected security issues privately rather than through a public issue. Include the affected version, operating system, X-Plane version, reproduction steps, and relevant Log.txt excerpts.

This project processes local keyboard events and invokes X-Plane commands. It does not intentionally use the network or collect telemetry. Reports involving unexpected network access, arbitrary file access, unsafe plugin loading, or command execution outside the documented XPLM command system are in scope.

Only the latest tagged release is supported for security fixes. Do not include credentials, private flight-plan data, or an entire unredacted system log in a report.