Please report security problems privately, not in a public issue: use Report a vulnerability on this repository's Security tab. Include what you found, how to reproduce it, and what an attacker could do with it.

We will acknowledge the report, keep you informed while we fix it, and credit you in the advisory unless you would rather not be named.

For example: a way to make chainstar leak a secret (an RPC URL with its API key, a database password, an API key from the environment), run code it should not, write outside the folders it is given, or send data anywhere other than the endpoints you configured.

chainstar is before its first release; fixes go to main, and to the latest release once there is one.