The latest version on the default branch is actively maintained. Older releases may receive security fixes when the vulnerability has a clear impact and a low-risk patch is available.
Please report suspected vulnerabilities by opening a private security advisory on GitHub or by contacting the maintainer directly through the profile contact links.
When reporting, include:
- Affected package or repository version
- Steps to reproduce the issue
- Expected and actual impact
- Any known workaround
Please do not disclose vulnerabilities publicly until a fix or mitigation is available.