Security by Design
RepoPrep is a standalone desktop application with no networked components. It does not open ports, make outbound connections, or listen for inbound traffic. The executable is self-contained and requires no runtime dependencies that could introduce supply-chain vulnerabilities.
We follow the principle of least privilege. The application requests only the file-system access needed to read your project directory and write cleaned output. It does not modify system files, registry entries, or environment variables outside its scope.
Code Transparency
The entire source code of RepoPrep is publicly available on GitHub under the MIT license. Anyone can inspect, audit, or fork the code. There are no obfuscated binaries, no closed-source modules, and no hidden telemetry. What you see is what you run.
Supply Chain Security
RepoPrep v2.2.0 is built from scratch with zero external runtime dependencies. The previous version relied on PySide6 and Python — v2.2.0 eliminates both. The result is a single 11MB executable with no transitive dependencies, no npm/pip trees, and no package-lock.json to audit.
All releases are distributed via GitHub Releases. Checksums are provided for each release so you can verify file integrity before running.
Vulnerability Disclosure
We take security seriously. If you discover a vulnerability in RepoPrep or any Lidprex Labs product, please report it responsibly:
- Open a confidential issue on GitHub Security Advisories
- Or reach out via the contact form on lidprex-labs.onrender.com
We commit to acknowledging receipt within 48 hours and providing a fix or mitigation plan within 14 days. We practice coordinated disclosure and will credit researchers who report valid issues.
Security Best Practices
- Verify downloads — Always check the SHA-256 checksum provided on the GitHub Releases page before running the executable.
- Run from trusted sources — Only download RepoPrep from the official GitHub repository. We do not distribute via third-party download sites.
- Audit the code — Since RepoPrep is MIT-licensed, you are free to inspect, compile, and run the source yourself instead of using the pre-built binary.