Skip to content

Security: VINASIG/bmi-calculator

SECURITY.md

Security and privacy

Calculate using local arithmetic only. Do not log measurements, store them or add a backend, analytics, remote font or third-party script without an owner-approved product change. Test with synthetic measurements. Browser origin/network policies and the hosting provider are separate from the application.

The no-script guard disables Calculate until initialization and gives health fields no form serialization names. Editing clears the old result. Clear, reload and tool navigation remove application measurements.

Report security concerns through this repository's GitHub private vulnerability reporting when available. Do not publish personal measurements, credentials or private captures in an issue. Dependency updates are proposals that require review, not automatic merges.

There aren't any published security advisories