Instantools holds Accessibility and Input Monitoring, so a flaw in it could expose what you type or give control of the Mac. Please report anything like that privately, not in a public issue.

Use GitHub's private vulnerability reporting: open the Security tab of this repository and choose Report a vulnerability. Include your macOS version, the Instantools version and build from Settings > About, and the steps that show the problem.

Only the latest commit on main. There are no binary releases: build from source as the README describes.