Cinematic is a sample application. It ships no credentials, talks only to Apple's public iTunes endpoints, and stores nothing sensitive — favorites live in UserDefaults on-device. The realistic security surface is small, but reports are still welcome.

The main branch is the only supported version. Fixes land there.

Please report security issues privately rather than opening a public issue:

• Use GitHub's private vulnerability reporting, or
• Email the maintainer at khizanag@gmail.com.

Expect an acknowledgement within a few days. Once a fix is ready, it will be released on main and the report credited unless you prefer otherwise.