# Security policy

growmos runs locally, has zero dependencies, and never sends data anywhere unless you opt into
headless mode with your own API key. Please report vulnerabilities privately to
**security@codician.com** (or via GitHub's private vulnerability reporting on this repo) rather
than in a public issue. We aim to acknowledge within 72 hours.

Supported: the latest release on PyPI.