Please do not open a public issue for a security problem. Report it privately through GitHub's private vulnerability reporting with the steps to reproduce it. You will get an answer within a week.

Things that count: a way for page content to change what jevcrawl fetches or returns beyond biasing a relevance score, a leak of the API key, or a way past the max_pages, max_seconds or max_decision_usd limits.