| Version | Supported |
|---|---|
Latest release on master / tagged v* |
Yes |
| Older tags | Best effort |
Please do not open a public GitHub issue for security-sensitive reports.
Email or DM the maintainer with:
- Description of the issue and impact
- Steps to reproduce
- Affected macOS version and Parcel build (Debug vs Release)
- Proof-of-concept if available
Parcel is a local-first menu bar app. Areas of interest:
- ScreenCaptureKit / TCC permission handling
- Supabase upload credentials storage (UserDefaults — user-provided keys only)
- Sandbox entitlements in Release builds
- Sparkle update signature verification
We aim to acknowledge reports within 72 hours and ship fixes in the next tagged release when confirmed.
- Issues requiring physical access to an unlocked Mac
- Missing Screen Recording permission (expected TCC behavior)
- Ad-hoc Debug builds without notarization (dev builds are unsigned by design)