We take security seriously. If you discover a security vulnerability in Logos IDE, please do not open a public issue. Instead, email us at hwllochen@qq.com with:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if available)

We will acknowledge receipt within 48 hours and provide updates on our progress.

• All dependencies are regularly updated to patch known vulnerabilities
• TypeScript provides type safety throughout the codebase
• ESLint and type checking are enforced in CI/CD pipelines

• The Rust daemon runs with minimal privileges
• LSP communication is isolated to the local process
• No telemetry is collected without explicit user consent

• Project files are stored locally only
• No data is transmitted without user authorization
• Git credentials are handled by the OS credential manager

We monitor security advisories for all dependencies:

• Frontend: Vue.js, Monaco Editor, and related packages
• Backend: Rust crates managed via Cargo
• Updates are applied promptly for critical vulnerabilities

For security updates and advisories, follow our GitHub releases.