Security reports are welcome for the latest release and the current main branch of tree-sitter-antlers.

Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository when available, or email john@stillat.com with a description, reproduction steps, and the affected revision. Reports will be acknowledged as soon as practical and coordinated privately until a fix is available.

The parser may process untrusted template text. Crashes, memory-safety problems, hangs, or inputs that cause severe CPU or memory growth should be treated as potential security issues.