If you discover a security vulnerability in LineSolv Plugins, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email: [rkriad585@gmail.com]

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Assessment: Within 1 week
• Fix or mitigation: Depends on severity, typically within 2 weeks

This security policy applies to the plugins in this repository. For vulnerabilities in the LineSolv application itself, see the LineSolv Security Policy.

LineSolv plugins are pure data manifests — they contain no executable code. Plugin functions are limited to math expressions and pre-defined builtin operations. Plugins cannot:

• Execute arbitrary code
• Access the network or file system
• Interact with the operating system
• Access other plugins or the main application beyond the calculator API

When installing plugins:

• Only install plugins from trusted sources
• Review the plugin.json manifest before installing
• Check that expressions use expected formulas
• Report any suspicious plugin behavior