Below are the versions of Baller that are currently supported with security updates.
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
Security and Reliability are two of our core objectives for Baller. We take security issues very seriously.
If you discover a security vulnerability within Baller, please send an e-mail to baller.support@gmail.com. We will respond to your report as soon as possible, ideally within 48 hours.
Please provide a detailed description of the vulnerability, including steps to reproduce the issue, potential impact, and any mitigation strategies if you have discovered them.
When using Baller, you entrust us with system access. To respect that trust:
- Hash Checks: By default, Baller will strictly validate the SHA-256 or SHA-512 hashes of any downloaded package payload before extraction, averting silent tampering or file corruption.
- Audited Connections: Downloads always target HTTPS, utilizing secure underlying
reqwestfeatures enforcing TLS. - Permissions: Baller's core design will avoid unnecessary privilege escalation. Privilege checks will only ask for authorization at the exact point it becomes necessary for installation.