This package performs deterministic local parsing and ranking. It makes no network requests and contains no credentials, customer data, AI prompts, or commercial scoring policy.

Treat procurement URLs, filenames, and free text as untrusted input. Consumers remain responsible for authorization, network retrieval, archive handling, legal interpretation, and decisions made from parsed data.

Report vulnerabilities through the repository's GitHub issues without including private tender documents, credentials, or customer data.