Skip to content

Security: snrnabi16/NotchHub

Security

SECURITY.md

Security

English · Русский

Found a vulnerability — email the address in the repository profile, or open a private report. Do not file a public issue with an exploit.

What the app does and does not do

NotchHub opens no ports, listens to no network, and makes no network requests. Translation is offline (Translation.framework). Now Playing is read locally through a system helper.

Screenshots from an iPhone arrive through Continuity pasteboard — that is a macOS channel, not NotchHub. The app only reads what landed on the pasteboard.

What NotchHub reads and where it lives

Clipboard history — in process memory only; nothing is written to disk.

Screenshots are saved under ~/Pictures/NotchHub and are never deleted automatically. Clearing is only from the menu bar, by hand.

Notes~/Library/Application Support/NotchHub/notes.json (plain text).

Signing

The build is ad-hoc signed, without a Developer ID or notarisation. On another Mac, Gatekeeper will ask for Open Anyway once.

There aren't any published security advisories