Please report suspected vulnerabilities through a private GitHub security advisory. Do not include sensitive details in a public Issue.

Before the first public npm publication, there is no supported release. During alpha, only the prerelease currently identified by npm's next tag receives security fixes. Earlier prereleases and unreleased source snapshots are not supported release lines. The alpha interface may change without backward compatibility between versions.