We use GitHub's Private vulnerability reporting-feature.

If you prefer, you may contact us privately via e-mail on [email protected]

• We release new versions automatically on merge.
• We usually do not patch older major versions, but may make exceptions for security fixes.
• We do our best to release security updates without breaking changes.