Microsoft takes the security of our software products and services seriously, which includes all source code repositories in our GitHub organizations.
Please do not report security vulnerabilities through public GitHub issues.
For security reporting information, locations, contact information, and policies, please review the latest guidance for Microsoft repositories at https://aka.ms/SECURITY.md.
For guidance on what winapp CLI development certificates and Developer Mode change on your machine, how to handle devcert.pfx safely, and how to sign packages for production, see the Security guidance page.