We support the latest published release on npm and the main branch. Older versions may not receive security updates.

Please do not open a public GitHub issue for security-sensitive findings.

Report vulnerabilities privately by email:

• Email: hello@thisux.com
• Subject: [security] sveltednd

Include as much detail as you can:

• Description of the issue and potential impact
• Steps to reproduce (or a proof of concept)
• Affected versions / commit SHAs if known
• Suggested fix, if you have one

• We aim to acknowledge reports within 3 business days
• We will keep you updated as we investigate and prepare a fix
• Please give us a reasonable window to release a patch before any public disclosure

Thank you for helping keep @thisux/sveltednd and its users safe.