snipkit is pre-1.0. Security fixes land on the latest 0.x release.

snipkit runs entirely locally and never opens a network connection, so its attack surface is small — but reports are still very welcome.

Please do not open a public issue for security problems. Instead, use GitHub's private vulnerability reporting on this repository, or email the maintainer. I aim to acknowledge reports within a few days and to ship a fix or a mitigation as quickly as I reasonably can.

When reporting, please include the snipkit version, your OS, and the steps to reproduce.