Skip to content

Security: cavafy-group/streetsweeper

Security

SECURITY.md

Security & Takedowns

Reporting a vulnerability

Please report security issues privately via GitHub's "Report a vulnerability" (Security tab > Advisories) rather than a public issue. Do not include live secrets (cookies, API keys, personal data) in reports.

Takedown / rights holders

Streetsweeper is a personal, non-commercial tool that reads publicly-listed data from StreetEasy. It does not redistribute or rehost StreetEasy content, it links back to the original listings. If you represent StreetEasy / Zillow or another rights holder and have a concern, please open a contact via the Security tab or the repo's contact info; good-faith takedown requests will be addressed promptly.

For users

  • Never commit your .env, config.yaml, or *.db (they're gitignored).
  • Never paste unredacted logs (they can contain your cookie / keys / PII).

There aren't any published security advisories