Security fixes are applied to the latest release on the default branch.
Please report security vulnerabilities privately via GitHub Security Advisories (or email the maintainer through the profile linked on https://github.com/hyperbit-dev).
Do not open a public issue for security reports.
You can expect an acknowledgement within 72 hours and an initial assessment within two weeks. Fixes for confirmed vulnerabilities are released as soon as practical.