Only the latest release receives security updates.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report them responsibly by emailing sahilgoel187@gmail.com with the subject line:

[SECURITY] <short description>

Include:

• A description of the vulnerability and its potential impact
• Step-by-step instructions to reproduce it
• Any proof-of-concept code or screenshots
• The version(s) affected

• Acknowledgment within 48 hours
• Status update within 7 days (accepted, declined, or needs more info)
• Fix timeline communicated once the issue is confirmed
• Credit in the release notes if you'd like it (opt-in)

We ask that you give us reasonable time to address the issue before any public disclosure.

We prefer all communications in English.

This is a read-only client for your own EPFO account. It stores your password only in the OS keychain. Never commit credentials, UANs, or passbook data.