845 B
Privacy and security model
Files remain in browser memory and are never uploaded. Package Tools performs no telemetry, DNS lookup, external relationship fetch, certificate lookup or signature validation. Export occurs only after an explicit button press.
Limits in v0.2 include 512 MiB source and aggregate declared expansion, 20,000 entries, 256 MiB per entry, 200:1 compression ratio, 2 MiB per metadata entry, 16 MiB total inspected metadata, and 512 metadata files. UI rendering is capped at 5,000 tree/comparison rows while diagnostics cover the bounded inventory.
External URLs are displayed as inert text. XML containing DTD or ENTITY declarations is rejected. SVG, HTML, JavaScript, PDF and executable content are never rendered from a package; raster image/audio/video preview is delegated to the browser through a local blob URL.