I had copilot take a look through your repository, I will link its finding at the bottom. as a tl;dr for anyone who got interested by the sales pitch of the website:
"DevMem is a moderately clever idea — tying AI-generated documentation updates to git commits is a legitimate problem worth solving — expressed in a Go codebase that is not yet production-ready, does not compile as committed, contains a material security misrepresentation in its documentation, and ships approximately one-quarter of the features its website describes.
...
The marketing website is polished to a degree inversely proportional to the maturity of the code behind it. The claims about credential security are not merely aspirational — they describe a specific technical mechanism ("macOS Keychain", "system credential store") that simply does not exist in the implementation. Users who trust that claim may store secrets in a file that is one cat command away from exposure."
hey thanks for noticing it , no certainly its not marketing . the website is ai generated , i was building it solo and didnt had the time to implement the macOs keychain system but its in the checklist for the future implementation !
also if you notice the commit history , its a one day shipping project , still theres a lot more to refine , i hope you have the patience along with me to make it a good developer tool !
I had copilot take a look through your repository, I will link its finding at the bottom. as a tl;dr for anyone who got interested by the sales pitch of the website:
"DevMem is a moderately clever idea — tying AI-generated documentation updates to git commits is a legitimate problem worth solving — expressed in a Go codebase that is not yet production-ready, does not compile as committed, contains a material security misrepresentation in its documentation, and ships approximately one-quarter of the features its website describes.
...
The marketing website is polished to a degree inversely proportional to the maturity of the code behind it. The claims about credential security are not merely aspirational — they describe a specific technical mechanism ("macOS Keychain", "system credential store") that simply does not exist in the implementation. Users who trust that claim may store secrets in a file that is one cat command away from exposure."
https://github.com/MultifokalHirn/DevMem/blob/copilot/write-...
hey thanks for noticing it , no certainly its not marketing . the website is ai generated , i was building it solo and didnt had the time to implement the macOs keychain system but its in the checklist for the future implementation !
i had planned for the security to store that in !
also if you notice the commit history , its a one day shipping project , still theres a lot more to refine , i hope you have the patience along with me to make it a good developer tool !
[dead]