Skip to content

Security: Neal006/memorylens

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Only the latest release on PyPI receives security fixes.

Reporting a Vulnerability

Please do not open a public issue for security problems.

Report privately via GitHub Security Advisories or email builtbyneal@gmail.com.

You can expect an acknowledgement within 72 hours and a fix or mitigation plan within 14 days for confirmed issues.

Scope notes

MemoryLens is a local benchmark tool. The most security-relevant surfaces are:

  • The optional FastAPI server (memorylens.api) — intended for local use, ships with no auth. Do not expose it to the public internet without a reverse proxy handling auth and rate limits.
  • LLM provider keys read from .env — never committed, never logged.

There aren't any published security advisories