This tool reads a results file and renders a report; no network, no execution of input. A defect that produces an overstated conformance claim is the real risk here — treat accuracy bugs as high severity.

Report issues in this tool privately: GitHub Report a vulnerability on this repo, or email the contact on the org profile. Target: 5 business days to acknowledge, coordinated disclosure.