Report flaws privately through GitHub Security advisories when available, or contact CompleteTech LLC through https://complete.tech to arrange disclosure. Use synthetic reproductions; do not include real images, hostnames, tokens or customer reports. Only the default branch is maintained.

This is an offline bounded metadata reader, not an image executor, extraction service, security verdict or runtime attestation. No network, authentication, Docker commands, target code or exploit probes are implemented. Use stable local evidence copies; ordinary file checks are not a concurrent filesystem sandbox.