Security fixes are provided for the latest stable release of each package.

Do not open a public issue for a vulnerability. Contact the maintainer through the private contact option on the GitHub profile and include:

• affected package and version;
• reproduction steps or proof of concept;
• expected impact;
• any suggested mitigation.

Please allow a reasonable period for confirmation and a coordinated fix before public disclosure.