diffold is currently pre-1.0. Please use the latest published version.

Please report vulnerabilities privately via GitHub Security Advisories — do not open a public issue for security reports. Include enough detail to reproduce the issue.

Non-sensitive bugs can be filed as regular GitHub issues.

• Read-only local CLI: no write/delete operations.
• No network access.
• No runtime dependencies in the compiled CLI.
• Uses Node-compatible built-in modules only.
• Explicitly skips symbolic links during traversal.
• Streams directory entries during traversal and fails closed when traversal limits are exceeded.
• Reports unreadable subdirectories and marks incomplete comparisons instead of silently exiting successfully.