Please report security issues privately through GitHub: Security → Report a vulnerability on this repository. Do not open a public issue for them.

I aim to respond within a week.

Still's only elevated capability is a sudoers rule, installed once with your approval at /etc/sudoers.d/still (root:wheel, mode 0440, validated with visudo before installation):

<user> ALL=(root) NOPASSWD: /usr/bin/pmset -a disablesleep 1, /usr/bin/pmset -a disablesleep 0

Sudo matches these arguments exactly. At runtime Still invokes sudo -n /usr/bin/pmset with an argument array and no shell, so no user-controlled input reaches a command line. Setup and removal use one fixed administrator command each, with a temporary file path generated by the app. The rule can be removed from Still's settings or with sudo rm /etc/sudoers.d/still.

Reports about this rule, the installation path, or any way to leave a Mac unable to sleep are in scope.

Official releases will be Developer ID signed, notarized and published with a SHA-256 checksum. Do not trust binaries from other sources.