Please check the project repo for up to date information on active maintanance status, if you are seeing this security policy, only the latest version is supported or the project may not be actively maintained.
To report a vulnerability, email hi@anth.dev with the detail.