If you discover a security vulnerability or security concern within any repository in the dev-bricks organization, please report it responsibly:
- Do NOT open a public issue or disclose vulnerability details publicly before a fix is available.
- Use GitHub Security Advisories on the affected repository to create a private draft advisory.
- Or contact the maintainers directly via email:
- Acknowledgment: Within 48 hours (best effort, guaranteed within 7 days)
- Initial Assessment & Triage: Within 7 to 14 days
- Fix & Disclosure Coordination: Best effort, typically within 30 days depending on severity
| Repository / Package | Supported Release | Security Updates |
|---|---|---|
Active repositories (DevCenter, CodeBox, pythonbox, app-rotator, ApiProber, MethodenAnalyser, WikiStub-Seed, safe-start-for-codex, automizer-for-claude-desktop, CareCenter-for-Codex, zombie-killer-tray, .github) |
Latest commit on main/master |
✅ Supported |
Archived repositories (fable-5-hunter) |
Historical reference / read-only | ❌ End of Life / Historical Snapshot |
- Zero-Egress & Local-First: All developer tools, static analyzers, and desktop apps run locally on the developer machine by default with zero unconsented telemetry or outbound data egress.
- Unprivileged User Mode (Non-Elevation): dev-bricks desktop applications and tray utilities run as normal user processes without requesting administrator elevation.
- Conservative Process Management: Process management tools such as
zombie-killer-trayandapp-rotatoruse strict parent-PID validation and heartbeat checks without performing indiscriminate process-tree kills.