Only the latest release of OpenDisk gets security fixes. The website build updates itself automatically, and the Homebrew and Mac App Store versions follow shortly after each release.
| Version | Supported |
|---|---|
| 1.2.x | ✅ |
| < 1.2 | ❌ |
Please don't open a public issue for security problems.
Report it privately through GitHub instead: go to the Security tab of this repository and click "Report a vulnerability". Include the OpenDisk version, your macOS version, and steps to reproduce if you have them.
What to expect:
- I'll reply within 7 days to confirm I've received it.
- If the issue is confirmed, I'll work on a fix and ship it in a new release, usually within 14 days depending on severity. I'll keep you updated along the way.
- If I decide it's not a vulnerability, I'll explain why.
- Once a fix is released, I'm happy to credit you in the release notes unless you'd rather stay anonymous.
OpenDisk has Full Disk Access and can delete files, so reports about anything that could cause unintended deletion, access outside what the user chose, or tampering with the update mechanism are especially appreciated.