We release patches and security fixes for active release series:
| Version | Status |
|---|---|
| 1.2.x | Supported |
| 1.1.x | Maintenance |
| 1.0.x | Maintenance |
| < 1.0 | Unsupported |
Security is critical for ToolPrune given its role as an in-line MCP proxy handling agent communications and local process supervision.
If you discover a security vulnerability within ToolPrune:
- Do NOT open a public issue.
- Send an email to
security@aloneangel.dev(or open a confidential GitHub Security Advisory directly on this repository). - Include detailed steps to reproduce the issue, proof of concept code, and impacted components.
- Initial Response: Within 48 hours acknowledging receipt of your report.
- Triage & Assessment: Regular updates every 72 hours until a fix is verified.
- Disclosure: Coordinated public disclosure alongside a patched release.