Please report vulnerabilities privately via GitHub Security Advisories or by email to saulo@toki.life. Do not open a public issue for security problems.

You can expect an initial response within 48 hours. Once a fix is available it is published to npm and the advisory is disclosed.