The latest released version on npm receives security fixes.

Please do not open a public issue for security problems.

Instead, report privately via one of:

• GitHub's private vulnerability reporting
• Email: clappingmonkey33@gmail.com

Please include a description, reproduction steps, and impact if known. You'll get an acknowledgement as soon as possible, and a fix and disclosure will be coordinated with you.