RigorPath processes configured projects locally. The Body binds to loopback by default, so it is not intended to be exposed on a network interface.

Never commit credentials, tokens, passwords, private datasets, or sensitive project paths. RigorPath flags credential-like patterns but cannot prove that all sensitive material has been found or safely removed.

Report suspected vulnerabilities through GitHub Private Vulnerability Reporting for this repository. Do not disclose vulnerabilities through public issues. RigorPath does not publish a personal security email or promise a response timeline.