If you discover a security issue, do not open a public issue. Please send a private report to the maintainers:

• GitHub Security Advisories tab: https://github.com/Pastalikek65/file-organizer-cli/security/advisories/new
• Or email the address listed on your GitHub profile / the repository's SECURITY.md maintainer contact.

You should receive a reply within 72 hours. Please include:

• A short description of the vulnerability
• The versions affected
• Steps to reproduce
• (optional) a suggested fix

This project is a Node.js CLI tool. Security-relevant areas include:

• Path handling: no path traversal, symlink escapes or ../../ issues in destination paths.
• Arbitrary destination paths supplied via --output / config: treat these as trusted inputs from the user who is running the CLI.
• The --json report writer follows the user-supplied path.
• No network calls, no secrets, no telemetry. The tool never sends your data anywhere.

Only the latest released version is supported with security fixes. Check the CHANGELOG for release information.

We appreciate coordinated disclosure. We will coordinate the fix and announcement with you before public disclosure.