Please do not report security vulnerabilities through public issues, discussions, or pull requests.

For this project, use the repository's private vulnerability reporting or security advisory flow if it is enabled. If that is not available, contact the maintainer through the repository owner profile and include enough detail to reproduce and assess the issue.

Helpful report details include:

• affected file paths or features
• steps to reproduce
• expected and actual behavior
• browser/runtime details
• proof of concept, if available
• impact and any known workaround

GitHub's corporate opensource-security@github.com address is not the reporting channel for this project unless GitHub itself owns the affected code or service.

This is a browser game. Reports are most useful when they affect users, local data, room state, dependency safety, or release artifacts.

This project does not support real-money gambling or gambling-service integrations.