If you discover a security vulnerability in MiddleDrag, please report it through GitHub's Security Advisory feature:

1. Go to the Security tab
2. Click "Report a vulnerability"
3. Fill out the private form

Do NOT open a public GitHub issue for security vulnerabilities.

Include the following in your report:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

• Acknowledgment: Within 48 hours of your report
• Initial assessment: Within 7 days
• Resolution timeline: Depends on severity, typically 30-90 days
• Credit: We'll credit you in the release notes (unless you prefer to remain anonymous)

MiddleDrag requires the following system permissions:

• Accessibility: Required to simulate mouse events. The app cannot function without this permission.

• Does not collect personal information
• Does not transmit any data by default (crash reporting is opt-in only)
• Does not modify system files
• Does not run background processes when disabled

Release builds are signed with an ad-hoc signature. Users may need to grant permissions in System Settings after installation.

We monitor dependencies for known vulnerabilities. Current dependencies:

• Sentry - Crash reporting