No release has been published yet. Security fixes will be provided for the latest released version once the package ships.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub: Security → Report a vulnerability.

Include a description, the affected version, and a minimal program that reproduces the issue. We aim to acknowledge reports within a few business days and to release a fix or mitigation as soon as a valid issue is confirmed.

This package is a provider for TagBites.IO. The core security model - no sandbox, paths are the only limit, advisory permissions, content buffered through the system temporary directory - is described in the core security policy. What follows is specific to this provider.

The address must carry an explicit http:// or https:// scheme. Over plain http:// the basic authentication header travels in clear text on every request.

Username and password, held in memory and sent with each request.