Only the latest release receives security fixes.

Please report vulnerabilities privately — do not open a public issue.

• Email security@getflightplan.com, or
• Use GitHub private vulnerability reporting on this repository.

Include what you found, how to reproduce it, and the impact you see. We aim to acknowledge reports within 3 business days.

This repository is the FlightPlan client: the CLI, the MCP adapter, and the install kit. Reports about the hosted service (api.getflightplan.com) go through the same channels — email is preferred for service issues.

The client sends coordination records (intent summaries, glob patterns, file paths) to the hosted service and stores your API key locally. Source code contents never leave your machine. Details are in docs/data-flow.md.