RepoXray – X-Ray Repositories, Don’t Just Read Them.

We actively maintain and provide security updates for the following versions:

We recommend always using the latest version to ensure maximum security.

If you discover a security vulnerability in RepoXray, please report it responsibly.

• Email: your-email@example.com
• Or open a private security advisory via GitHub

Please provide:

• 📌 Description of the vulnerability
• 🔁 Steps to reproduce
• 💥 Impact (what can be exploited)
• 🛠️ Possible fix (if known)

• ⏳ Initial response: within 48 hours
• 🔍 Investigation: within 3–5 days
• 🚀 Fix release: based on severity

While using RepoXray:

• ❌ Do not expose API keys or secrets
• 🔐 Use environment variables for sensitive data
• 📦 Keep dependencies updated
• 🛡️ Avoid uploading private repositories without proper permissions

• Please do not publicly disclose vulnerabilities before they are fixed
• We appreciate ethical reporting and will acknowledge contributors

We value the security community and appreciate responsible disclosures that help improve RepoXray.

“Understand code. Secure it better.”