Only the latest 0.1.x line is intended to receive fixes.

The analyzer reads local source and configuration as text; it must never execute a project's configuration, import its application modules, or upload source. Generated HTML escapes user-controlled text and embeds no scripts or remote resources.

Report vulnerabilities privately at https://github.com/taneruzum/next-cache-trace/security/advisories/new. Private vulnerability reporting was enabled and verified on 2026-09-19. Do not post exploit details in public issues.

Reports contain local paths, literal tag names, function names and diagnostics. Review generated artifacts before sharing them publicly.