boos
e0a5f57793
Vendor the rebranded BoosAPI Desktop client (Tauri + Vue) into metapi as a monorepo subdirectory under desktop/. Source only — node_modules, dist, Cargo target and the upstream .git history are excluded. desktop/ keeps its own independent Cargo workspace (desktop/src-tauri with crates/*); it is not part of the backend boosapi crate, so a `cargo check` at the metapi root still compiles only the backend. Build the desktop app from desktop/src-tauri per desktop/README.md. Note: app icons are still placeholder assets pending the final BoosAPI logo. The updater signing keys live outside the repo and are not included.
16 lines
713 B
Markdown
16 lines
713 B
Markdown
# Security Policy
|
|
|
|
## Supported versions
|
|
|
|
We support the latest published version and the `main` branch. Please update to the newest release before reporting issues.
|
|
|
|
## Reporting a vulnerability
|
|
|
|
- Email: [simon_he@outlook.com](mailto:simon_he@outlook.com)
|
|
- Please include reproduction steps, affected version, and impact. If possible, attach a minimal repro (the test page can generate shareable links: https://markstream-vue.simonhe.me/test).
|
|
- Do not open public issues for potential vulnerabilities until we coordinate a fix and disclosure timeline.
|
|
|
|
## Response expectations
|
|
|
|
You should receive an acknowledgement within 72 hours. Once confirmed, we will work with you on a fix and coordinated disclosure.
|