repro-lens runs static analysis locally on your machine and never transmits repository files, AST trees, or telemetry to external servers.

If you discover a security vulnerability (such as arbitrary code execution during static AST parsing or malicious rule injection), please report it responsibly by opening a GitHub Security Advisory or contacting project maintainers directly.

Security updates are actively applied to the latest release on the main branch.