Security fixes target the latest published version of pi-smart-compact.
| Version | Supported |
|---|---|
Latest 7.x |
✅ |
| Older | ❌ |
Please do not open a public issue for vulnerabilities, leaked secrets, or private-session data exposure.
Report privately through GitHub Security Advisories:
https://github.com/alpertarhan/pi-smart-compact/security/advisories/new
If advisories are unavailable, contact the maintainer listed in package.json.
pi-smart-compact processes Pi session content to produce compaction summaries.
Depending on the session, this may include repository paths, command output,
tool results, and user-provided context.
Operational guidance:
- Do not paste secrets into sessions you plan to compact.
- Redact private logs before attaching them to issues.
- Treat generated compaction summaries as potentially sensitive project context.
- Review provider / model configuration before enabling auto-triggered compaction.
Runtime artifacts are written under ~/.pi/agent/; see the
runtime artifacts table in the README.