Report privately via this repository's GitHub security advisories (Security → Report a vulnerability). Do not open public issues for suspected vulnerabilities.
Reports are acknowledged within 72 hours. This software executes no client-supplied code and stores no user data; transliteration inputs are processed in memory only and never logged.