Skip to content

Security: akhan157/RecoverySys

SECURITY.md

Security Policy

Reporting a vulnerability

RecoverySys is local-first HPR recovery planning software. Please do not disclose security vulnerabilities in a public issue. Contact the repository maintainers privately through the contact information on the GitHub profile.

Include the affected version, operating system, steps to reproduce, and any relevant logs or screenshots. Please do not include launch-site personal data, private configuration files, or other sensitive information unless necessary.

You should receive an acknowledgement within 14 days. We will assess the report, keep the reporter informed as practical, and credit reporters when they wish to be named.

Scope

Reports involving local data handling, imported files, share-link payloads, desktop packaging, or dependency vulnerabilities are welcome. RecoverySys does not provide a backend or transmit configuration data as part of normal use.

There aren't any published security advisories