Repository navigation
A security update for Fluentfolio on Windows and Ubuntu.
- Updates filelock, OpenTelemetry and setuptools to address five published dependency advisories. The security scan now passes without ignoring or suppressing findings.
- Updates the same affected packages in the optional MFA aligner environment. An older environment is shown as needing an update and cannot run until repaired.
- Keeps recordings, analyses, settings and downloaded speech models. The app's privacy settings and default tools are unchanged.
Install or update
Download Source code (zip) below and extract it. On Windows, run Install.cmd; on Ubuntu, run ./install.sh. If Fluentfolio is already installed, close it first and use the installer to update it.
If you use the optional MFA aligner, install that component again from Setup, or run fluentfolio components install mfa after updating. This rebuild downloads its environment packages again and needs an internet connection. MFA remains experimental and off by default.
The existing limitations and known risks in SECURITY.md still apply, including the separately documented older pillow/certifi packages in the optional MFA environment. This update addresses the five reported advisories; it does not claim that every third-party component is free of vulnerabilities.
The v0.1.0 release and its history are preserved.