llm-wiki-engine 0.2.0

Git-backed wiki engine with MCP server — bring your own LLM
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# Security Policy

## Supported Versions

| Version | Supported |
|---------|-----------|
| 0.1.x   | ✓         |

## Reporting a Vulnerability

Please report security vulnerabilities by email to <jguibert@gmail.com>.

**Do not open a public issue.**

You should receive an acknowledgment within 48 hours. A fix will be
prioritized based on severity and released as a patch version.

## Scope

llm-wiki is a local-first tool. It does not make network requests,
store credentials, or run user-supplied code. The main attack surface is:

- Malicious Markdown files processed by the ingest pipeline
- SSE transport exposed on a network port (`llm-wiki serve --sse`)
- Dependencies (tantivy, git2, rmcp, agent-client-protocol)

Dependency vulnerabilities are tracked via `cargo audit` in CI and
Dependabot alerts.