Files
BoosAPI/desktop/libs/markstream-vue/SECURITY.md
T
boos e0a5f57793 feat(desktop): embed BoosAPI Desktop client as a subproject
Vendor the rebranded BoosAPI Desktop client (Tauri + Vue) into metapi as
a monorepo subdirectory under desktop/. Source only — node_modules,
dist, Cargo target and the upstream .git history are excluded.

desktop/ keeps its own independent Cargo workspace (desktop/src-tauri
with crates/*); it is not part of the backend boosapi crate, so a
`cargo check` at the metapi root still compiles only the backend. Build
the desktop app from desktop/src-tauri per desktop/README.md.

Note: app icons are still placeholder assets pending the final BoosAPI
logo. The updater signing keys live outside the repo and are not
included.
2026-06-22 11:32:57 +08:00

713 B

Security Policy

Supported versions

We support the latest published version and the main branch. Please update to the newest release before reporting issues.

Reporting a vulnerability

  • Email: simon_he@outlook.com
  • Please include reproduction steps, affected version, and impact. If possible, attach a minimal repro (the test page can generate shareable links: https://markstream-vue.simonhe.me/test).
  • Do not open public issues for potential vulnerabilities until we coordinate a fix and disclosure timeline.

Response expectations

You should receive an acknowledgement within 72 hours. Once confirmed, we will work with you on a fix and coordinated disclosure.