Please report suspected vulnerabilities privately via GitHub Security Advisories or by emailing the author (see package.json). Do not open public issues for security reports. You should receive a response within a few days.

Only the latest published release receives security fixes. The package has not been published to npm yet.