No release has been published yet. Security fixes will be provided for the latest released version once the package ships.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub: Security → Report a vulnerability.

Include a description, the affected version, and a minimal program that reproduces the issue. We aim to acknowledge reports within a few business days and to release a fix or mitigation as soon as a valid issue is confirmed.

This package is a provider for TagBites.IO. The core security model - no sandbox, paths are the only limit, advisory permissions, content buffered through the system temporary directory - is described in the core security policy. What follows is specific to this provider.

Either a TokenCredential supplied by the caller, or a raw access token. A raw token is held in memory and is not refreshed; prefer the TokenCredential overload so token lifetime stays with the Azure Identity library.