Security fixes are handled on the latest released minor line.
Please report security issues privately to Pletor Co., Ltd. before opening a public issue.
Include:
- affected version or commit
- impact and reproduction steps
- whether config file write access, local filesystem access, or container privileges are required
- any suggested mitigation
Do not include secrets, production data, or customer-specific identifiers in reports.
node-metrics-agent is a telemetry module. It must fail open: failures in metric collection,
configuration reload, or exporter integration must not stop the host JVM process.
Configuration is parsed with SnakeYAML safe construction. Runtime config reload keeps the previous working config if a new config is invalid.