goguma runs in the background, so a bug can sit there for days before you notice. Leave your email and you'll get a message when one is found and when it is fixed.
bugs, fixes, and the occasional new feature
It can check once a day for the same notices, with no address and no account at all:
goguma config set advisory_checks on
One small file from this site, with no identifier attached, not even which version you're running.
Your address is used to mail you about goguma. Buttondown holds the list and sends the mail. Not sold, no tracking pixel.
goguma itself still sends nothing about you or your jobs.
It's a mailing list, not a change to the product. Security has the detail.