Files
package-tools/public/docs/PRIVACY-SECURITY.md
T
2026-09-01 13:04:50 +02:00

16 lines
845 B
Markdown

# Privacy and security model
Files remain in browser memory and are never uploaded. Package Tools performs
no telemetry, DNS lookup, external relationship fetch, certificate lookup or
signature validation. Export occurs only after an explicit button press.
Limits in v0.1 include 512 MiB source and aggregate declared expansion, 20,000
entries, 256 MiB per entry, 200:1 compression ratio, 2 MiB per metadata entry,
16 MiB total inspected metadata, and 512 metadata files. UI rendering is capped
at 5,000 tree/comparison rows while diagnostics cover the bounded inventory.
External URLs are displayed as inert text. XML containing DTD or ENTITY
declarations is rejected. SVG, HTML, JavaScript, PDF and executable content are
never rendered from a package; raster image/audio/video preview is delegated to
the browser through a local blob URL.