This is a local desktop widget with no network features. Security concerns are limited to:
- Malicious timezone strings from the IANA database (none known)
- Config file integrity (
clock_config.jsonis user-local JSON)
If you discover a security issue, please email sparshsam@gmail.com instead of opening a public issue. Do not report security vulnerabilities through public GitHub issues.
| Version | Supported |
|---|---|
| >= 0.1.0 | Yes |
| < 0.1.0 | No |
- Only install this widget from the official GitHub repository.
- Review
clock_config.jsonif manually editing — invalid JSON is silently reset. - No secrets, tokens, or credentials should ever be stored in this project's files.