Only the current deployed version receives security fixes.

Use GitHub private vulnerability reporting. Do not include private shopping data in a public issue.

GrocerTrack stores shopping lists in the browser's local storage. It does not send them to a backend. Anyone with access to the browser profile or device may be able to read that data. Clearing browser storage removes it permanently.