The following versions of this extension are currently being supported with security updates:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
We take the security of our users seriously. If you discover a security vulnerability within this project, please do not open a public issue. Instead, follow the steps below:
- Email us: Send an email to me@anthuanvasquez.net with the subject "SECURITY VULNERABILITY".
- Details: Include a detailed description of the vulnerability, steps to reproduce it, and any potential impact it might have.
- Response: We will acknowledge your report within 48 hours and provide a timeline for a fix if applicable.
We ask that you follow responsible disclosure principles and allow us sufficient time to address the issue before making any public announcement.
This security policy applies only to the gemini-cli-engram extension and its direct source code. It does not cover external dependencies or the Engram MCP server itself, which should be reported to their respective maintainers.