mojo-unicodedata is a pure-Mojo Unicode normalization and case-folding library with no network access, no authentication, and no secrets handling — it takes a string and returns a normalized or case-folded string. The main risk surface is malformed or adversarial input (e.g. deeply nested decompositions, long combining-mark runs) causing a crash, hang, or unbounded memory growth.

If you find an input that crashes, hangs, or otherwise misbehaves in a way that looks security-relevant, please report it via a GitHub issue, including the offending string (as text or hex codepoints) and the operation you called.

This is a personal open-source project maintained on a best-effort basis — there's no formal SLA for response time, but reports are welcome and taken seriously.