Local-first design
- Local development services are intended to run on your Windows machine
- The desktop application is designed without product telemetry
- Website analytics and download tracking are separate from activity inside the desktop app
- Managed tools and project metadata are stored in the current user context
Safe local development practices
- Do not expose local development services directly to the public internet
- Use the runtime ports shown in LaraStack as the source of truth
- Keep Windows and third-party components updated
- Avoid using production credentials in local .env files
- Review project dependencies before installing or running them
Report a vulnerability
Use the Contact page for responsible disclosure. Provide a clear description, affected version, reproduction steps and impact. Avoid publishing exploit details before the issue has been reviewed.