Security fixes are applied to the latest published version of answerlint. Users should upgrade to the newest npm release before reporting a problem that may already have been corrected.

Please report suspected vulnerabilities privately through GitHub's security advisory form. Do not open a public issue for an undisclosed vulnerability.

Include the affected version, reproduction steps, impact, and any suggested mitigation. Maintainers will acknowledge a report within seven days and will coordinate disclosure and remediation with the reporter. Timelines depend on severity and fix complexity; status updates will be provided through the private advisory.