Security fixes are provided for the latest published Spectacle 2 release.

Use GitHub's private security advisory flow for this repository when available. Do not disclose exploitable details in a public issue. Include affected versions, impact, and minimal reproduction steps.

Spectacle 2 is distributed with a self-signed identity and is not notarized by Apple. Verify downloads against the SHA-256 checksum attached to each GitHub release.