Skip to content

Security: liminallyspaced/ASCII-Synthesizer

Security

SECURITY.md

Security

ASCII Synthesizer is designed as a local-first media conversion tool.

Secret Handling

The app does not require API keys, access tokens, cloud credentials, or remote service accounts. Rendering is deterministic and runs locally through Swift and Apple media frameworks.

Network Behavior

The renderer does not make network requests. The optional terminal companion generates shell commands for local CLI usage and optional Claude/Codex workflows, but conversion works without any agent or online service.

Release Hygiene

Before packaging a release, run:

swift test
./scripts/package_release.sh

Recommended local checks:

rg -n --hidden -i "(api[_-]?key|secret|token|password|bearer|private[_-]?key|ghp_|github_pat_|sk-)" .
codesign --verify --deep --strict --verbose=2 "dist/ASCII Synthesizer.app"

Reporting Issues

Open a GitHub issue with:

  • the input type, not private media unless you can share it
  • export format
  • grid settings
  • macOS and Swift versions

There aren't any published security advisories