RadioCLI does not require secrets or accounts.

Open a private security advisory on GitHub:

https://github.com/Ciphore/RadioCLI/security/advisories

If private reporting is unavailable, open a minimal public issue asking for a private disclosure path, but do not include exploit details. Please avoid filing public issues for vulnerabilities that could expose local files, private network information, or unexpected command execution.

• Nearby location is enabled by default for new libraries, but no location request is made until the Nearby screen is opened.
• Location lookup uses approximate IP-based location from ipapi.co; disable it with l, Settings, or :location off.
• The app stores recents, favorites, settings, imports, and provider cache data locally under the user data directory.
• RadioCLI does not proxy audio. It resolves public stream URLs and hands playback to mpv or ffplay.
• Favoriting a Radio Browser station sends a best-effort vote to that public directory by default; the Settings screen can disable vote sharing.

Until a tagged release cadence is established, security fixes target the active development branch and the latest public npm release.