| Version | Supported |
|---|---|
| latest | ✅ |
Only the latest release receives security fixes.
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public issue
- Use GitHub's private vulnerability reporting
You should receive an initial response within 72 hours.
This project is a CLI tool that processes local audio files. The primary security concerns are:
- Command injection via filenames passed to ffmpeg
- Dependency vulnerabilities in Rust crates
- Malicious input files causing unexpected behavior