Please report security concerns privately to the contact address listed in the application rather than opening a public issue. KeymapKit has no network stack and does not process or store passwords. Never include sensitive text or device identifiers in reports.