Security Policy

Scope

Audion Image Tools is a local portable toolkit intended for offline or controlled workstation use. It processes user-supplied image files and writes results to local output folders.

Supported release line

The current release package is the supported line for fixes and cleanup.

Basic security model

• no built-in network service is exposed by default
• no background telemetry is intended
• processing is limited to local input selected by the user
• output is written only to user-selected destinations inside the local workflow

Responsible use

Before processing untrusted files:

• prefer working inside a dedicated workspace
• keep your Python runtime and native dependencies updated
• treat optional third-party adapters as part of the trust boundary
• do not run the toolkit with unnecessary administrator privileges

Reporting a security issue

If you discover a security problem, do not publish exploit details immediately. Document the issue clearly, including:

• affected file or module
• exact reproduction steps
• expected behavior
• actual behavior
• whether the issue requires a malicious file or environment

Then share the report privately through the maintainer’s preferred channel.

Out of scope

The following are generally outside the core security scope of this package itself:

• vulnerabilities in external viewers used to open output files
• issues caused by unsafe third-party Python wheels outside the packaged environment
• operating system misconfiguration on the host machine