If a problem could hurt other players or users once it is public, report it privately: open a private security report. The meter's Report a problem button has a Security problem choice that opens the same form.

Not sure whether it is a security problem? Open a normal issue with just the word "security" in the title and no details. It will be moved to a private report.

Everything else (wrong numbers, crashes, requests) goes in a normal issue. See Reporting problems in the README.

• Every private report gets an answer within 3 days.
• A confirmed problem is fixed, or published as an advisory with what users should do, within 14 days.
• After the fix, the advisory is made public, with credit to the reporter unless they ask otherwise.
• If a report gets no answer within 7 days, the reporter is free to publish it.

Anything that lets someone read, change or send data the user did not choose to share; run code through the meter or its capture helper; or get more from the capture permission than the user's own game traffic. Problems in the a2tools.app site or service belong to the A2Tools developer, not here.

Only the newest build is supported, and older builds get no fixes, with one exception: the 1.x legacy package daevalog-dps-meter-legacy (r607), whose support otherwise ends with 2.0.0, still gets fixes for security problems.