Skip to content

SECURITY.md

Latest commit

 

History

History
43 lines (31 loc) · 1.62 KB

SECURITY.md

File metadata and controls

43 lines (31 loc) · 1.62 KB
Raw

Security Policy

Supported versions

This project is pre-1.0. Security fixes are applied to the latest main and the most recent release only.

Version Supported
main (latest) ✅
0.1.x ✅
older ❌

Reporting a vulnerability

Please do not open a public issue for security vulnerabilities.

Instead, report privately using GitHub's private vulnerability reporting: go to the repository's Security tab → Report a vulnerability.

When reporting, please include:

  • A description of the issue and its potential impact.
  • Steps to reproduce (a minimal proof of concept if possible).
  • Affected version or commit.
  • Your environment (OS, Python version).

You can expect an initial acknowledgement within a few days. Once a fix is available, we will coordinate disclosure and credit you in the release notes if you wish.

Scope and notes

This is an educational computer-vision project intended to run locally against a webcam or local image folders. Please keep these boundaries in mind:

  • The application does not transmit or store webcam frames; session reports contain aggregate metrics only.
  • download-fer2013 fetches data from a third-party Hugging Face dataset. Treat any externally downloaded data and pretrained model files as untrusted input.
  • Emotion inference here is a baseline model and must not be used for clinical, diagnostic, surveillance, or automated decision-making purposes.