Security fixes are made on the current main branch.

Please do not open a public issue for a suspected vulnerability. Instead, use GitHub's private vulnerability reporting for this repository after it is published, or contact the maintainer privately through the repository profile.

Include reproduction steps, affected version/commit, impact, and any suggested mitigation. Do not include passwords, session cookies, access tokens, or other credentials in the report.

Downpour intentionally does not support bypassing DRM, paywalls, or site access controls. Reports that depend on such bypasses are out of scope.