mirror of
https://github.com/pandorafuture/wx-cli.git
synced 2026-08-29 04:00:55 +00:00
pandorafuture
e5646df42c
- LICENSE (MIT) - SECURITY.md (vulnerability reporting policy) - CONTRIBUTING.md (development setup and contribution guide) - CI workflow (fmt, clippy, test on push/PR) - Issue templates (bug report, feature request) - Dependabot config (cargo + github-actions weekly) - Cargo.toml workspace metadata (license, repository, description)
900 B
900 B
Security Policy
Supported Versions
| Version | Supported |
|---|---|
| 0.7.x | ✅ |
| < 0.7 | ❌ |
Reporting a Vulnerability
If you discover a security vulnerability in wx-cli, please report it responsibly:
- Do NOT open a public issue.
- Use GitHub Private Vulnerability Reporting to submit your report.
- Include steps to reproduce, affected versions, and potential impact.
You should receive an acknowledgment within 48 hours. We will work with you to understand the issue and coordinate a fix before any public disclosure.
Scope
wx-cli handles sensitive data including:
- WeChat database encryption keys
- Decrypted chat messages and media
- Local keystore files
Security issues in any of these areas are treated with high priority.