Shelf has not received an independent security audit. Do not use it as the only protection for data whose disclosure could cause serious harm.
Please report security issues privately to the repository owner rather than opening a public issue. Include the Android version, hiding method, reproduction steps, and whether the device is rooted. A public advisory can be prepared after a fix is available.
Only the latest tagged release is supported during the initial development phase.