Security policy Do not report vulnerabilities in public issues. Use GitHub's private vulnerability reporting for this repository. Only the latest stable minor release and the active prerelease receive security fixes before 1.0.