lotobo/midi-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Release MIDI Tools 0.2.0
Verify / verify (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
zemion
2026-09-02 09:14:48 +02:00
parent 4b51a6d903
commit 06e095a2eb
40 changed files with 1581 additions and 126 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+12 -2
View File
@@ -1,5 +1,15 @@
# Security policy
Report vulnerabilities privately to the repository owner. Supported version: 0.1.x.
Report vulnerabilities privately to the repository owner. Supported version: 0.2.x.
MIDI Tools makes no uploads, telemetry or third-party requests. JSON is parsed as inert data under text, depth, node and token-count bounds. Exporters escape Android XML and quote Swift strings. Generated source remains an input to another toolchain and must be reviewed before production use.
MIDI Tools makes no uploads, telemetry or third-party requests. MIDI and
SoundFont files are treated as untrusted binary data under the documented size,
track, event, SysEx and RIFF-chunk bounds. Worker results are revision-scoped so
cancelled or superseded jobs cannot replace newer state.
Web MIDI access is requested only after an explicit click and always with SysEx
permission disabled. The app does not subscribe to MIDI inputs; playback sends
only bounded channel messages to the output selected by the user, and Stop
clears queued messages and sends all-notes-off on every channel. SoundFont files
are inspected locally for bounded RIFF metadata and are never synthesized,
executed, fetched remotely or sent to a device.