Use the latest version of Demel.
If you discover a security vulnerability within Demel, please do not open a public issue.
Demel uses API keys for services like Gemini and ListenBrainz.
- NEVER commit your
.envfile to version control. - The
.gitignorefile is configured to exclude.envby default. - If you accidentally commit your API keys, revoke them immediately and generate new ones.
Please report security issues by opening a draft security advisory or contacting the maintainer directly if that option is not available.