Report a vulnerability

If you have found a security problem, please report it privately before disclosing it publicly. This repository is not public, so there is no issue tracker to open one in: email is the route.

How to report

Email security@emendant.com with "security" in the subject line. Please include:

• the output of emendant --version, if the report is about the tool;
• your operating system and Node.js version;
• what you did, what happened, and what you expected instead; and
• anything needed to reproduce it, such as a minimal repository or a request.

You will get an acknowledgement within five working days, and an assessment with a plan or a reason for declining within thirty days. There is no bug bounty. Where you would like credit for a report, say so and it will be given in the release notes for the fix.

What is in scope

• the emendant package published on npm, including the change feed inside it;
• the feed service at feed.emendant.com, including the signing and trust chain; and
• this website.

Out of scope: the model providers Emendant can be pointed at, the package registries it reads, and the repositories it scans, all of which belong to somebody else. Reports about a breaking change in a provider's SDK are not security reports; those go to contact.

Testing that is welcome, and testing that is not

Test against your own machine and your own repositories freely. Please do not run load or denial of service tests against the feed service, do not try to reach other people's data, and do not use automated scanners against emendant.com. If a test needs to touch the live service in a way this paragraph does not cover, ask first at the address above.

Research carried out in line with this page is treated as authorised, and no legal action will be pursued over it.

What the tool is built to guarantee

A scan is local and read only: no source code is uploaded, and no network request is made. Everything the feed client fetches is verified against a trust root inside the installed package, so a compromised origin can decide what bytes arrive and never whether they are accepted. The installed tool has no signing key and no signing primitive in it at all. The security and privacy documentation states each of these precisely, including the narrower claims that apply to fix mode.