We take the security of CommitPulse seriously. If you discover a vulnerability, please report it responsibly.
- Please contact maintainers via GitHub (preferred)
Please include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if possible)
We aim to support the latest version of CommitPulse.
| Version | Supported |
|---|---|
| Latest | ✅ Yes |
| Older | ❌ No |
To keep your usage secure:
- Always install from trusted sources
- Avoid running the tool on untrusted repositories
- Keep your dependencies updated
- Do not expose sensitive tokens or credentials
CommitPulse is designed with privacy in mind:
- No source code is uploaded or stored
- Only Git metadata is analyzed
- Local analysis mode ensures full control over your data
We appreciate responsible disclosure and will:
- Respond within 48–72 hours
- Investigate and fix issues promptly
- Credit contributors (if desired)
Thanks to all contributors who help keep CommitPulse secure.