Acceptable Use Policy

Last updated: July 25, 2026

This policy applies to every Teamfox-hosted LPM.dev Registry surface, including packages, accounts, organizations, APIs, Pool, Marketplace, tunnels, encrypted environment sync, remote cache, AI features, and integrations.

Prohibited Content

You may not upload, publish, transmit, store, or promote content that:

  • Contains malware, credential theft, ransomware, destructive payloads, concealed miners, or other malicious functionality
  • Attempts to exfiltrate data or execute undisclosed surveillance or telemetry
  • Infringes copyright, trademark, privacy, publicity, trade-secret, or other rights
  • Contains personal data, credentials, or confidential information without authority
  • Facilitates fraud, phishing, spam, unlawful access, harassment, exploitation, or other illegal activity
  • Misrepresents a package's contents, origin, compatibility, security, price, license, or commercial terms
  • Is designed primarily to evade package review, security controls, sanctions, or law enforcement

Prohibited Conduct

You may not:

  • Access or attempt to access another account, organization, package, environment, tunnel, or entitlement without authorization
  • Share, resell, forge, or misuse credentials, registry tokens, licenses, seats, or OIDC identities
  • Circumvent package review, quarantine, access controls, payment checks, rate limits, or technical restrictions
  • Manipulate downloads, dependency relationships, Pool allocations, search ranking, reviews, referrals, or other metrics
  • Create deceptive accounts, purchases, organizations, packages, or payment activity
  • Interfere with, overload, probe, or disrupt the Services or another user's systems
  • Scrape or automate requests at a volume that materially degrades the Services or violates an applicable limit
  • Use AI features to generate or facilitate malware, credential theft, fraud, unlawful surveillance, or evasion of security controls
  • Submit another person's confidential or personal data to an AI feature without authorization

Tunnels and Network Services

You may not use tunnels, webhook tools, or related network services to:

  • Operate an open proxy, anonymization relay, command-and-control channel, phishing endpoint, spam service, or malware distribution point
  • Attack, scan, intercept, or access systems without authorization
  • Evade another service's security, network, geographic, or usage restrictions
  • Relay unlawful material or traffic
  • Consume resources in a deliberately abusive or disruptive manner

You are responsible for securing any local service exposed through a tunnel and for the traffic that service accepts.

Packages, Marketplace, and Pool

Publishers and sellers must not:

  • Publish code they do not have the right to distribute or license
  • Hide material behavior from package documentation or metadata
  • Manipulate dependency depth, install observations, or accounts to increase Pool revenue
  • Use self-dealing, coordinated installs, fabricated users, or automated activity to influence payouts
  • Offer terms that conflict with rights granted in the package or its dependencies
  • Continue distributing a package after losing the rights required to do so

Encrypted Environments

Client-side encryption does not make unlawful use acceptable. You may not use encrypted environment sync to store or distribute credentials, personal data, or other material that you do not have the right to possess or share.

Never intentionally submit environment secrets to AI chat, package metadata, support messages, or other plaintext fields.

Security Research

Good-faith security research is not prohibited when it:

  • Uses accounts and systems you own or have permission to test
  • Avoids privacy violations, service disruption, persistence, and data destruction
  • Does not access, retain, or disclose another user's data
  • Stops when a vulnerability or unintended access path is confirmed
  • Is reported promptly to hello@lpm.dev

This permission does not authorize testing of third-party systems or activity prohibited by law.

Enforcement

Depending on severity, history, and risk, Teamfox may:

  • Warn the account owner or request corrective action
  • Restrict a version, package, token, tunnel, organization, payment, or feature
  • Quarantine, archive, deprecate, or remove access to content
  • Suspend or terminate accounts and seller privileges
  • Withhold or offset payouts connected to suspected fraud or abuse
  • Preserve evidence and report conduct where required by law

We may act immediately when necessary to address malware, credential compromise, fraud, legal process, or an imminent threat. Where appropriate, we will provide notice and an opportunity to appeal.

Reporting and Appeals

Report abuse or appeal an enforcement decision at support@lpm.dev.

For copyright claims, use the process in our DMCA Copyright Policy.