We take the security of DevHunt seriously. As a local-first workspace, keeping your API keys, local database, and processed files safe is our top priority.

Only the latest release version of DevHunt is actively supported with security patches:

If you discover a security vulnerability in DevHunt, please do not open a public issue. Public disclosures can expose users before a patch is ready.

Instead, report the security vulnerability privately:

1. Email: Contact Hitesh Solanki directly at solankihiteshpankajbhai7@gmail.com.
2. Details: Please include a detailed description of the vulnerability, steps to reproduce it, and any proof-of-concept scripts or screenshots if available.

• We will acknowledge receipt of your report within 48 hours.
• We will work with you to understand and confirm the vulnerability.
• Once fixed, we will publish a security update and release a new setup version (.exe / .msi) immediately.
• We will give you proper credit in our release notes if you wish.

Thank you for helping keep DevHunt secure for the developer community!