Block a user
Rsync parity: output and logging options (--itemize-changes, --out-format, --info, --debug, --list-only, --files-from, --human-readable)
Rsync parity: extended metadata preservation (hard links, ACLs, xattrs, devices, sparse files)
Rsync parity: symlink handling flags (--links, --copy-links, --safe-links, --copy-unsafe-links)
Update README for new features, missing flags, and stale content
TLS client disables certificate verification when no CA is provided
MAX_DATA_SIZE = 1GB allows large memory allocation from network input
No per-message receive timeout allows slow loris / hang DoS
Fixed 512-byte stack buffer for SSH user@host can truncate silently
Integer overflow in delta_signature_deserialize allocation
No connection limit on server creates fork bomb DoS vector
strstr(..) path traversal check is weak and has false positives
Bandwidth limiter uses nanosleep causing jitter, and SSL thread-local limits threading
Static compression level wastes CPU on incompressible files
Single-threaded BFS scanner is a bottleneck for large directory trees
Fixed queue capacity 100 may cause pipeline stalls for varied file sizes
Loader thread loads all file data into memory causing high memory usage
Incremental check causes per-file network round-trip -- batch it
Hardcoded queue capacity 100 should be configurable via --queue-size
Missing --log-file option for persistent logging
Missing --max-depth directory traversal limit flag