Skip to content

Security: rkriad585/EMTranslator

Security

SECURITY.md

Security Policy

Scope

emtranslator is a local command line tool. It reads only the input you provide and writes only the user dictionary at ~/.config/neostore/emtranslator/config.toml. It makes no network requests and handles no secrets, credentials, or untrusted network data.

Reporting a vulnerability

If you believe you have found a security issue, please report it privately instead of opening a public issue. Contact the maintainer at rkriad585@gmail.com.

Please include:

  • A description of the issue and why it is a security concern.
  • Steps to reproduce.
  • The version affected (emtrans --version or the contents of .version).

What to expect

  • Acknowledgment of your report within a reasonable time.
  • A fix as soon as possible, followed by a release note in the CHANGELOG.

Supported versions

The latest release on main is the only supported version.

Security considerations for users

  • The tool is intended to be used with text you trust. It performs no sandboxing or sanitization of arbitrary input, so do not use it to process untrusted binary data.
  • Custom --dictionary files and the user dictionary are parsed as plain text with a minimal TOML reader; malformed files are ignored and reported as empty.

Back to README

There aren't any published security advisories