Security

Permissions

Your code runs in sandboxes, isolated from other sandboxes, and not accessible from the internet. Our staff does not read your code, unless you ask them to. This can happen, at your request, during our onboarding process or due to support requests.

We do however analyze build logs in case of errors, to send you relevant information about what happenned and how to fix the problem. These do not contain sensitive information, and are mainly compilation reports or debug output from our own scripts.

Due to the nature of GitHub's security model, when you give us access to your public or private repositories, we gain access to all of them by default. However, we only ever access the ones you explicitly add in our interface, and any statistics we may gather will only be done on active projects explicitly declared on Packager.io.

SSL

We force HTTPS for all services, including our public website. We also make sure to use only third-party hosted software with HTTPS enabled.

Disclosure

We rapidly investigate all reported security issues. If you believe you've discovered a bug in our security, please get in touch at support@packager.io, optionally using our PGP key at the bottom of this page. We request that you not publicly disclose the issue until it has been addressed by our team.

PGP

Please find our PGP key below. You can use it to encrypt your communications with us.

  • Key ID: 3180FABF
  • Key type: RSA
  • Key size: 2048
  • Fingerprint: 1860 780C D423 2D90 7CEB 06CC 61EF 9D67 3180 FABF
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=2jHn
-----END PGP PUBLIC KEY BLOCK-----