| Version | Supported |
|---|---|
| 0.x.x | ✅ |
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public GitHub issue
- Email the maintainer directly or use GitHub's private vulnerability reporting
- Include detailed information about the vulnerability
- Allow reasonable time for a fix before public disclosure
- Models are downloaded from Hugging Face over HTTPS
- Downloaded files are stored in
~/.cache/huggingface/ - No authentication tokens are stored or transmitted by node-mlx
- All inference happens locally on your device
- No data is sent to external servers
- The library works fully offline after model download
- The Swift CLI is compiled from source during installation
- Source code is available for review in
swift/Sources/ - Uses official Apple MLX libraries