Security

Permissions

Your code runs in sandboxes, isolated from other sandboxes, and not accessible from the internet. Our staff does not read your code, unless you ask them to. This can happen, at your request, during our onboarding process or due to support requests.

We do however analyze build logs in case of errors, to send you relevant information about what happenned and how to fix the problem. These do not contain sensitive information, and are mainly compilation reports or debug output from our own scripts.

Due to the nature of GitHub's security model, when you give us access to your public or private repositories, we gain access to all of them by default. However, we only ever access the ones you explicitly add in our interface, and any statistics we may gather will only be done on active projects explicitly declared on Packager.io.

SSL

We force HTTPS for all services, including our public website. We also make sure to use only third-party hosted software with HTTPS enabled.

Disclosure

We rapidly investigate all reported security issues. If you believe you've discovered a bug in our security, please get in touch at support@packager.io, optionally using our PGP key at the bottom of this page. We request that you not publicly disclose the issue until it has been addressed by our team.

PGP

Please find our PGP key below. You can use it to encrypt your communications with us.

Key ID: 3180FABF
Key type: RSA
Key size: 2048
Fingerprint: 1860 780C D423 2D90 7CEB 06CC 61EF 9D67 3180 FABF