Terms of Service

These terms describe the Anywaye service. Read them before you use the service.

Beta service

The service is in beta. We can change or stop it at any time. We do not give a warranty.

What you grant

When you connect a repository, you give Anywaye read access to the repository. You also give permission to create pull requests on a branch. We do not push to your default branch.

What we do

We scan dependency lockfiles for known CVEs. We open fix pull requests. A fix pull request changes a dependency version and updates the lockfile. We do not change other code.

What we do not guarantee

We do not promise that a fix removes the CVE. We do not promise that a fix passes your tests. You review and merge each pull request. You are responsible for the code that you ship.

Your responsibilities

You must own the repositories that you connect. Do not use the service to attack repositories that you do not own. Do not abuse the service.

Data handling

We clone a repository into an isolated dev box to create a pull request. We delete the dev box and its disk when you disconnect the repository or delete your account. We do not store your source code in our database. See the Privacy Policy for details.

Limitation of liability

We are not liable for indirect or consequential damages. The service is provided without warranty.

Termination

You can stop using the service at any time. We can stop the service or remove access for abuse.

Changes to these terms

We can change these terms. We will tell you about material changes.

Governing law

These terms follow the laws of the State of Delaware.

Contact

Questions? Join us on Slack.