Security fixes are applied to the latest release on the default branch.

Please do not publish exploitable details in a public issue. Use GitHub's private vulnerability reporting flow for this repository when available, or contact the repository owner through their public GitHub profile and request a private channel.

Include:

• the affected version or commit;
• the macOS version and Apple Silicon generation, without serial numbers or other device identifiers;
• reproduction steps;
• expected and actual behavior;
• the security impact.

mac-temp is intentionally read-only:

• no root or sudo requirement;
• no fan or SMC writes;
• no network access;
• no command execution based on sensor values;
• no secrets or environment configuration;
• bounded local history retention.

The program dynamically accesses temperature-related IOKit/HID symbols. These interfaces can change across macOS versions and should not be treated as a security or hardware-diagnostic boundary.

Before attaching logs, remove usernames, home-directory paths, serial numbers, hardware UUIDs, hostnames, and unrelated environment variables. Normal mac-temp output does not include those fields.