Only the latest commit on main is supported.

Report vulnerabilities privately to extrtabrtddark@astermail.org — please do not open a public issue first.

For scrubbr, a silent false negative is a vulnerability: any input where an identifying or secret value survives scrubbing without at least a residual warning is worth a report, even if it looks like an edge case.