If you discover a security vulnerability, please report it by emailing 20943337+Nick2bad4u@users.noreply.github.com or by opening a private issue on GitHub. Do not disclose security issues publicly until they have been reviewed and patched.
- Please include as much detail as possible to help us reproduce and address the issue quickly.
- We aim to respond to security reports within 7 days.
- Always use the latest version of FitFileViewer.
- Keep all dependencies up to date. The current major dependencies and their versions are:
| Dependency | Version |
|---|---|
| @garmin/fitsdk | ^21.205.0 |
| electron | 42.2.0 |
| electron-builder | ^26.8.1 |
| electron-conf | ^1.3.0 |
| electron-updater | ^6.8.3 |
| eslint | ^10.4.0 |
| vitest | ^4.1.7 |
| zod | ^4.4.3 |
- Do not open files from untrusted sources.
- If you use a custom build, ensure your dependencies are up to date.
We appreciate responsible disclosure of security issues and will credit reporters in our release notes if desired.