Skip to content

Security: Krishnatadi/aicurt

SECURITY.md

Security Policy

This package is intended for secure, private, local AI preprocessing workflows.

Supported Versions

Security updates are provided for the latest released version of this package.

Reporting a Vulnerability

Please contact the maintainer privately to report a suspected security issue. Do not disclose details publicly until a safe remediation path has been agreed.

Responsible Disclosure

Please allow reasonable time to investigate and address reported vulnerabilities before making them public.

Security Principles

  • Dependency-free implementation
  • Standard-library-only runtime
  • No network calls in the core package
  • Safe defaults for redaction
  • No secret transmission outside the local process

Privacy

The package does not collect, transmit, or store user data outside the local environment. All processing is performed locally unless explicitly integrated into another application.

Quality Assurance

  • Comprehensive unit test suite
  • All tests pass successfully
  • Dependency-free implementation
  • Standard-library-only runtime

Out of Scope

The following are generally not considered security vulnerabilities:

  • Incorrect PII detection caused by unsupported formats
  • User configuration errors
  • Issues caused by modifying the package source code

There aren't any published security advisories