Do not open a public issue.

Email hello@adelzemzemi.com with a description of the problem, the affected package and version, and the smallest way to reproduce it. You will get an acknowledgement, and a fix or an explanation of why it is not one.

Please do not disclose publicly until a fixed version is released.

The latest released major of each package receives security fixes. Older majors do not, unless stated otherwise in that package's own SECURITY.md, which takes precedence over this file.