BD-1 is a local desktop application. It stores observations locally and does not require a BD-1 hosted service.

Please do not disclose an unpatched security vulnerability in a public issue. Use GitHub's private vulnerability reporting for this repository when it is available. Otherwise, contact the repository maintainers privately and include the affected version, operating system, reproduction steps, and a proposed impact assessment.

Security fixes are published through the normal tagged release process when possible. Users should use the latest release for their platform.