Only the latest release is supported — please update before reporting an issue.

Please do not open a public issue for security vulnerabilities.

Instead, report privately via GitHub's private vulnerability reporting.

I will do my best to acknowledge reports within 2 weeks and aim to release a fix or mitigation within 6 weeks for confirmed issues; timelines are best-effort.

prawn handles a GitHub token and an Anthropic API key supplied via flags, environment variables, or .prawn config files, and writes fetched pull request data and generated reports to local files. Issues involving token leakage (e.g. tokens appearing in logs, output, error messages, or the generated html) are particularly relevant.