- Add adaptive app icon with AI chip + signal wave vector design - Add Apache 2.0 LICENSE file - Rewrite README with badges, full API docs, Python examples, device compatibility table, dependency licenses, and ToS disclaimer - Extract all hardcoded layout strings to strings.xml - Add roundIcon support in AndroidManifest - Add GitHub community files: issue templates, PR template, CONTRIBUTING.md, SECURITY.md Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
707 B
707 B
Security
Important
This app runs an unauthenticated HTTP server on your local network. By design, anyone on the same network can send requests to the API. Do not expose this server to the public internet.
Reporting Vulnerabilities
If you discover a security issue, please open a GitHub issue or contact the maintainer directly. Since this is a local-network tool, most security concerns relate to network exposure rather than data handling.
Scope
- The server binds to all network interfaces on the configured port
- No authentication or API keys are required
- All inference is local — no data is sent to external servers
- CORS is permissive (
*) for local development convenience