Skip to content

Security: lor3nzo/rossi

Security

SECURITY.md

Security

Rossi is a static site. It has no backend, no accounts, and it sends no data anywhere. Settings (last station, volume, mixer) stay in the visitor's own browser storage.

Reporting a problem

Open a GitHub issue. For anything sensitive, use GitHub's private vulnerability reporting on this repository instead of a public issue.

Before you commit

  • Never commit SFTP, hosting or API credentials. Deployment needs none in the repo.
  • node_modules/ and dist/ are ignored on purpose. Build locally, upload dist/.

There aren't any published security advisories