Skip to content

Security: Gohans1/chat-width

Security

SECURITY.md

Security Policy

Scope

This repository contains a Hermes Desktop renderer plugin. It is not a sandboxed program: a loaded Hermes Desktop plugin runs with the authority of the app's plugin SDK.

The latest release is v0.1.2. Older releases are supported on a best-effort basis.

The plugin in this repository is intentionally small. It does not make network requests, call a backend, read files, spawn processes, or handle credentials. It writes only its own width selection to Hermes plugin storage and manages the --composer-width declaration on the document root while enabled.

Reporting a vulnerability

Please do not open a public issue for a suspected security vulnerability. Use GitHub's private vulnerability reporting for this repository when it is available. Include:

  • the affected commit or release;
  • exact reproduction steps;
  • the impact you observed; and
  • a minimal proof of concept, if safe to share.

Do not include API keys, tokens, cookies, private session data, or other credentials in a report.

There aren't any published security advisories