# Security

This package modifies the installed Pi TUI JavaScript files and therefore executes with the same permissions as Pi.

Review the source before installation. The patch performs no network requests, collects no telemetry, and creates local backup files before modification.

Report security issues privately to the repository maintainer after the repository is created. Do not publish exploit details before a fix is available.