Please do not open a public issue for security problems.

Report privately through GitHub: open the Security tab of this repository and choose Report a vulnerability. Include a description, reproduction steps, and the affected version.

You can expect an initial response within 7 days.

Video Composer calls third-party APIs (OpenAI, Pexels, Pixabay) using keys you provide. Keep keys in a local .env file, which is git-ignored, and never commit them.

Only the latest release on PyPI receives security fixes.