This tool reads a dish file and reports allergen mismatches; no network, no execution of input. A defect here has a food-safety dimension — a bug that lets an undeclared allergen pass is a real-world hazard, so treat allergen-logic regressions as security-grade.

Report issues in this tool privately: GitHub Report a vulnerability on this repo, or email the contact on the org profile. Target: 5 business days to acknowledge, coordinated disclosure.