microfolio is a static site generator: the sites it produces contain no server code, no database and no user accounts, which keeps the attack surface small. Security issues are still possible — in the build tooling, in a dependency, or in something we did not think of.
The latest release is the supported one. Fixes land there; older versions are not patched retroactively.
Please report privately, not in a public issue:
- GitHub security advisories (preferred)
- hello@aker.pro
Tell us what you found, how to reproduce it, and what you think the impact is. You'll get a human answer — this is a small team, so within days rather than hours — and a credit in the changelog if you want one.