SyrinxReport a vulnerability privately
The reporting mailbox is {CONTACT_EMAIL} and the repository is {GITHUB_URL}. Neither has been configured yet. Do not send sensitive reports to a guessed address or post an unpatched issue publicly. A working private reporting route is required before launch.
When a verified route is published, include affected version, reproduction steps and expected impact, with secrets and personal information removed.
Update signing
The product’s update design uses signed releases and verifies signatures before installation. The signing algorithm, public key distribution, rotation procedure and exact verification steps are awaiting release documentation.
A SHA-256 checksum detects a mismatch against the published file. It is not a replacement for a trusted publisher signature. Check both against the exact release.
This site currently distributes no installer and provides no evidence of a signed release. Version, date, checksum and download link remain visible placeholders on the download page.
Windows SmartScreen
A new or uncommon app may have insufficient reputation and trigger a warning. Verify the official source and expected publisher before proceeding. Stop if a signature is missing or unexpected.