microfolio is a static site generator: the sites it produces contain no server code, no database and no user accounts, which keeps the attack surface small. Security issues are still possible — in the build tooling, in a dependency, or in something we did not think of.

The latest release is the supported one. Fixes land there; older versions are not patched retroactively.

Please report privately, not in a public issue:

• GitHub security advisories (preferred)
• hello@aker.pro

Tell us what you found, how to reproduce it, and what you think the impact is. You'll get a human answer — this is a small team, so within days rather than hours — and a credit in the changelog if you want one.