We release patches for security vulnerabilities for the following versions:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
If you discover a security vulnerability within Error Learner, please report it through GitHub's Security Advisory feature. Go to the repository's "Security" tab and click on "Report a vulnerability". All security vulnerabilities will be promptly addressed.
For more information about privately reporting a security vulnerability, see GitHub's documentation.
Error Learner implements the following security measures:
-
Error Data Handling
- Error data is stored locally and not transmitted to external servers
- Sensitive information in error messages is not logged
-
Code Analysis
- Static analysis is performed in a sandboxed environment
- No code execution during analysis
-
Dependencies
- Regular dependency updates
- Security-focused dependency scanning
-
Access Control
- Local file access only
- No network operations
When using Error Learner:
- Keep the package updated to the latest version
- Review error logs for sensitive information
- Use appropriate logging levels in production
- Regularly check for security updates