Report vulnerabilities to rkriad585@gmail.com. Do not file a public issue.

You should receive a response within 48 hours. If the issue is confirmed, a fix will be released as soon as possible depending on complexity.

This policy covers the abscomfonts npm package and all associated source code in this repository. Vulnerabilities in third-party dependencies should be reported to their respective maintainers.