Only the latest published version on npmjs.com receives security fixes. This is an internal tooling package; v0.x versions have no stability guarantees.

Do not open a public GitHub issue for security vulnerabilities.