If you discover a security vulnerability within the jolter npm package or Jolter CLI installer ecosystem, please do NOT open a public GitHub issue.

Instead, please report security issues privately by emailing the maintainers or submitting a security advisory directly on GitHub.

The jolter npm package enforces strict security constraints:

1. HTTPS Enforcement: All downloads are restricted exclusively to HTTPS requests against official GitHub Releases (https://github.com/jolterjs/jolter).
2. Cryptographic Checksum Verification: Every binary download must pass SHA-256 integrity verification against checksums.txt before extraction and installation.
3. No Dynamic Remote Code Execution: Code execution before cryptographic checksum validation is prohibited.
4. No Telemetry: No tracking or dynamic third-party network requests are performed.