Please report security issues for promise-bridge through GitHub issues if no private channel is available yet. Include a minimal reproduction and affected versions.
This package is independent from q and does not share its release or security process.