Skip to content

Security: TYLERSFOSTER/imkerutils

Security

SECURITY.md

Security Policy

imkerutils currently contains both a Python image-processing library and the EXQUISITE application prototype.

The repository is undergoing pre-publication security and publication-hygiene review. It should not yet be treated as a polished production security boundary.

Supported Versions

Security review targets the current main branch until a public release line is explicitly tagged.

Reporting A Vulnerability

Once the repository is public, report suspected security issues through GitHub Issues unless the report contains sensitive exploit details, private data, or credential material. For sensitive reports, contact the Project Owner privately first and include:

  • the affected commit or version,
  • the affected code or documentation surface,
  • reproduction steps when available,
  • whether the issue involves credentials, local files, generated artifacts, deployment configuration, payment flows, or admin/operator access.

Current Scope

The EXQUISITE application code is still being hardened. Before public release, the project should continue to check for:

  • committed credentials or private keys,
  • local-machine path leakage,
  • stale deployment or operator instructions,
  • placeholder payment/webhook behavior,
  • accidental generated artifacts,
  • admin/operator surfaces that are too easy to expose,
  • stale examples that bypass the session-cookie auth model.

There aren't any published security advisories