We take security very seriously. We follow the rule of responsible disclosure, and we encourage the community to as well.
After each new major release, the previous release will be supported for no less than 6 months, unless explicitly stated otherwise. This may mean there are multiple supported versions at any given time.
If you discover a security vulnerability within this package, please email Syed at syed at lukonet.com. All security vulnerabilities will be promptly addressed. Please do not disclose security-related issues publicly until a fix has been announced.