Skip to content

Repository navigation

Security: ehsanhajian/RPCBench

Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting

Use GitHub private vulnerability reporting for anything that could leak credentials, enable abuse of third-party RPCs, or otherwise should not be public first.

Non-sensitive bugs can be a public issue.

RPCBench is a local benchmark CLI. It does not custody keys or user accounts. It is not a security scanner (Nodeprobe).

Scope notes

In scope: secret handling in reports/config, unsafe defaults (unbounded load, write methods), dependency issues.

Out of scope: RPC provider infrastructure, and security-surface checks that belong in Nodeprobe (see docs/BOUNDARY.md).

There aren't any published security advisories