Security fixes are applied to the latest release on the default branch.

Please use GitHub private vulnerability reporting when it is available for this repository. Do not open a public issue for a vulnerability that could expose user data or enable code execution.

Include:

• A concise description
• Reproduction steps
• Affected files or commands
• Expected impact
• A safe test case when possible

The Python scanner parses source with the standard library AST module. It does not import or execute the analyzed project.

The hosted workbench processes the sample source in the browser and does not persist it. Do not paste secrets or proprietary source into any hosted development tool without confirming your organization's policy.

The CLI migrate --write command changes the selected file after the patch contract passes. Review the diff and use source control before enabling write mode.