Please report suspected vulnerabilities through GitHub's private vulnerability reporting. Do not put exploit details, credentials or confidential models in a public issue. Include the affected commit or package version, platform, reproduction steps, expected impact and a minimal example without sensitive data.

OpenPhysics is under active development. Security fixes are developed on main; there is no promised support period for historical package versions. The browser Studio binds to loopback by default and is intended for local use. It is not an authenticated multi-user service; do not expose it to an untrusted network. Numerical validation is documented in the documentation index and the tested platforms in the development guide.