Chainik is a small convenience utility, not a safety or security system. No security support SLA is provided.

Please use GitHub's private security-advisory feature for this repository when available. Do not open a public issue containing credentials or private data.

Never attach your real .env or unredacted logs. Remove at least:

• TP-Link ID email and password;
• Telegram bot token and chat ID;
• local IP addresses;
• usernames and absolute filesystem paths;
• timestamps or notification text that you consider private.

• .env stores credentials in plain text and must remain private.
• Telegram is disabled by default.
• Chainik reads power telemetry but does not issue on/off commands to the plug.
• The community Tapo client is unofficial and may be affected by device or firmware changes.
• Treat generated EXE files as separate release artifacts and audit bundled dependencies before distribution.