Skip to content

Security: Xeowa/MoodTune

Security

SECURITY.md

Security and privacy

Local-first data

MoodTune stores mood entries, music metadata, and uploaded audio on the local machine by default. Do not expose the development server directly to the internet. Uploaded files are limited to 25 MB and a documented audio allowlist, but this research prototype is not a hardened multi-user service.

Reporting a vulnerability

Please report security concerns privately through the repository owner's GitHub profile rather than opening a public issue. Include the affected endpoint, reproduction steps, and potential impact. Do not include private mood records or copyrighted audio in reports.

Supported version

Only the latest commit on the default branch is supported.

There aren't any published security advisories