TensorPlan is a static, client-side application. It does not collect or transmit calculation inputs except when the user explicitly requests a public model configuration from ModelScope or Hugging Face.
Please report security issues privately through GitHub's security advisory feature rather than opening a public issue.