diffpack is local-first and does not make network requests.

It includes best-effort redaction for common secrets such as API keys, private keys, passwords, and bearer tokens. This redaction is intentionally conservative but cannot guarantee that every sensitive value is removed.

Before pasting generated output into any third-party service, review it manually.

Please report security issues privately by opening a GitHub security advisory or contacting the maintainer through GitHub.