StorageScope is a local-first macOS utility. It scans folders only after the user grants access through macOS folder selection or security-scoped bookmarks.

Do not commit local signing credentials, provisioning profiles, notarization credentials, exported packages, generated DMGs, Codex state, or scan outputs. The repository .gitignore excludes the common local artifacts for those workflows.

If you find a security issue, open a private advisory or contact the maintainer through the repository owner profile. Please avoid posting exploit details publicly before there is a fix.