Report vulnerabilities privately via GitHub Security Advisories — please do not open a public issue for security reports.

The latest release line receives security fixes. wordtoken runs fully locally and makes no network calls; reports touching the PII scrubber's completeness are considered in scope.