# RFC 9116 — security contact for this site

Contact: mailto:contact@craftquantities.com
Expires: 2027-04-24T19:35:33Z
Preferred-Languages: en
Canonical: https://craftquantities.com/.well-known/security.txt

# Scope: static files, plus a separate calculation service at api.craftquantities.com.
# Neither has a database or user accounts, and neither stores what is sent to
# it. The interesting surface is the client: stored cross-site scripting
# through project import, the calculator query string, or anything else that
# reaches the DOM; and, for the service, its inputs.