Report vulnerabilities in the Lifecharts CLI, the bundled agent skill, or the release tooling privately through GitHub: open the Security tab and choose "Report a vulnerability". Please do not file a public issue for a suspected vulnerability. If GitHub reporting is unavailable, email [email protected].

Include the affected version, the steps to reproduce, and what an attacker could do. We aim to acknowledge a report within three business days and to tell you the outcome of triage within ten.

Security fixes land in the latest release. Update with the instructions in the README or install the newest archive from the releases page.

This repository contains the CLI, the skill, and the packaging and release scripts. It has no runtime dependencies. Problems in the hosted Lifecharts site at lifecharts.io are also welcome through the same private route.