mojo-diff is a pure-Mojo text-diffing library with no network access, no authentication, and no secrets handling: it takes two sequences of lines and returns opcodes or unified-diff text. The main risk surface is malformed or adversarial input (extremely long lines, pathological repeated-line patterns) causing a crash, hang, or unbounded memory growth, which the fuzz suite (test/fuzz_runner.mojo) specifically targets.

To bound worst-case memory, the Myers diff caps its exact search at _MAX_EDIT_DISTANCE steps (src/diff/diff.mojo). Inputs whose edit distance stays within the cap diff exactly (byte-compatible with difflib); more-dissimilar inputs fall back to a coarse prefix/suffix-preserving result instead of allocating the O(D^2) trace, so two large unrelated files can no longer exhaust memory.

If you find an input that crashes, hangs, or otherwise misbehaves in a way that looks security-relevant, please report it via a GitHub issue, including the two inputs that trigger it.

This is a personal open-source project maintained on a best-effort basis. There's no formal SLA for response time, but reports are welcome and taken seriously.