Please do not report security issues in public issues, discussions or pull requests.

Report them privately through GitHub: open the repository's Security tab and choose Report a vulnerability (private vulnerability reporting). The report reaches the maintainers only.

Include what is affected (a script, a build option, a generated file), the revision you used, how to reproduce it and what an attacker could do with it. You will get an answer as soon as the report is triaged. Please give us a reasonable time to release a fix before you disclose the issue.

ui-builder builds the SIMAI Framework distribution from its source. Issues in the built Framework runtime belong to simai/ui-source; issues in third-party dependencies belong to their upstream projects.