Gold Elite takes security seriously. Since this extension makes zero network requests and stores all data locally, the attack surface is minimal.

If you discover a security vulnerability, please report it privately by opening a GitHub Security Advisory.

Do not disclose the vulnerability publicly until it has been addressed.

• You will receive an acknowledgment within 48 hours
• We will investigate and provide a timeline for a fix
• A fix will be released as a patch version
• You will be credited in the release notes (unless you prefer to remain anonymous)

The following are in scope:

• The extension source code (extension.js)
• The color theme JSON
• The webview assets and dashboard
• The build and packaging process

The following are out of scope:

• VS Code itself
• Third-party extensions (GitLens, Git Graph, Error Lens)
• The underlying operating system