felipe/pokebuddy
1
0
Fork 0
mirror of https://github.com/domfelipe/pokebuddy.git synced 2026-08-07 08:16:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
pokebuddy/SECURITY.md
Felipe Domingues d58df9bd10 Initial commit: pokebuddy_cli
2026-04-25 23:14:38 -03:00

691 B
Raw Blame History

Security Policy

PokeBuddy CLI is local-first and stores user state at:

~/.pokebuddy/state.json

It does not require network access, accounts or telemetry.

Supported versions

Version Supported
0.x Yes

Reporting a vulnerability

Please report security issues privately when possible. If a private channel is not yet listed, open a minimal GitHub issue requesting security contact without publishing exploit details.

Security principles

  • No telemetry by default.
  • No hidden network calls.
  • No shell command execution from companion data.
  • Companion plugins must be explicit and user-installed.
  • Local state should remain human-readable.