There is no versioning so always stick to master branch

If you detect a vulnerability, open an issue or go ahead and create a Pull Request if you prefer. I would definitely appreciate it =)