Notes

Security

Media parsers are untrusted input. ffmpeg is time-bounded. Production signing keys must not live in source, long-lived env vars, or PostgreSQL.

Report issues via Contact. Do not attach end-user originals to tickets.

Author: Roma Verify Editorial · Reviewed: Roma Verify Engineering · Updated: 2026-09-16