Security fixes are developed against the current master and the latest release. Older example APKs are retained for history and should not be assumed to receive fixes.

ScreenCaster deliberately demonstrates unencrypted, unauthenticated raw video transmission. Use it only on a trusted network and restrict the receiver's listening interface/firewall. It does not provide browser streaming, access control, or audio capture. Android screen-sharing consent does not authenticate the network receiver.

Use GitHub's private vulnerability reporting form. Include affected versions, reproduction steps, impact, and a minimal proof of concept that does not expose anyone else's data. Do not publish credentials or private screen contents in Issues or Discussions.

Coordinate disclosure through the private report. Response times depend on maintainer availability; no response-time guarantee is made.