Skip to content

Security: VolkanSah/Codey

SECURITY.md

=============================================================================
Codey - No Mercy EDITION - Security Policy
=============================================================================

Codey is a neutral quality pet/tool for GitHub and GitLab.

  • It shows the world that not everything is scam and AI-generated garbage.
  • Codey scores Developer integrity — you can't fake it, you have to earn it.
  • Heart, Brain, Skin: A dead Codey doesn't lie. Authenticity is the only currency.
This tool is considered a security tool under ESOL v1.1:
  • It audits developer behavior, code quality and social engineering patterns.
  • Public audit available on GitHub — transparent, community-verified.
  • Any attempt to game the scoring system is flagged as a security violation.

Free to use on GitHub and GitLab and similar Portals. Selling this script or using it for reputation manipulation is prohibited.

Licensed under Apache 2.0 + Ethical Security Operations License (ESOL v1.1)

Jurisdiction: Germany (Berlin) — enforced under StGB §202a/b/c and DSGVO. https://github.com/VolkanSah/ESOL Copyright (c) 2026 VolkanSah & BadTin and some Cats

Refactored + Bugs fixed + Issue analysis added BUG: marks fixed bugs NEW: marks new features IMPROVED: marks improvements


Security Policy

Supported Versions

Codey is a living immune system. Only the latest version is supported and monitored.

Version Supported
Latest Yes
< 2.0 No

Reporting a Vulnerability

In accordance with our anti-fraud mission, security bugs must be reported privately. Public disclosure of vulnerabilities aids scammers and is considered a violation of the project's safety.

Reports should be sent to the following security contacts:

Integrity Audit

Every audit is archived. Manipulation of the "Proof of Life" metrics will result in a permanent record within the Wall of Shames. View Audit Data


Contact & Legal

For legitimate inquiries:

  • Legal requests: Through proper legal channels (Berlin Jurisdiction)
  • Security concerns: See contacts above or mail minigrex@proton.me

Community


For scammers:

  • Your site is archived
  • Your violations are documented
  • Your lies won't work here
  • You cannot delete the record of what you did

Last updated: 19.02.2026 09:40 MEZ by VolkanSah

Note: Written with the context of mine and the help of claudeAi

There aren’t any published security advisories