Security
Reporting a security issue
Where a security report goes depends on what it's about. Whichever it is, please report it privately, not in a public issue.
Editmamei Desktop
For a vulnerability in the editmamei npm package (the CLI and the MCP
server you install), the full policy lives on GitHub: scope, what to include, and our response timelines.
The preferred channel is a private security advisory, which keeps your report confidential while
we work on a fix. You'll get an acknowledgment within a few business days.
- Report a vulnerability privately (preferred)
- Read the security policy on GitHub.
Please don't open a public GitHub issue for a security bug. The tracker is public, so the report would be too.
Editmamei Connect
For an issue in Editmamei Connect at connect.editmamei.com, its sign-in or the files it handles, email security@editmamei.com.
This website
For an issue in editmamei.com itself or its hosting, email security@editmamei.com. A PGP key is available on request.