Skip to content

Repository navigation

Security: chetanupare/rewind

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in RewindX, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Instead, please email: security@rewindx.app

What to Include

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

Response Time

  • Initial response: 24 hours
  • Status update: 72 hours
  • Fix timeline: Depends on severity

Security Measures

  • All data stored locally
  • No telemetry or analytics
  • No cloud connections (by default)
  • Sensitive content filtered
  • API keys stored in environment variables

Scope

  • Application code
  • Dependencies
  • Build process
  • Distribution

Recognition

Security researchers who responsibly disclose vulnerabilities will be credited in the CHANGELOG.

There aren't any published security advisories