Please report suspected vulnerabilities through a private GitHub security advisory. Do not include sensitive details in a public Issue.
The release currently identified by npm's latest tag receives security fixes. Approved releases publish directly
to latest; historical next tags do not establish a separate supported channel.
Distribution channels are independent of version syntax. Before 1.0.0, increasing the minor version starts a
breaking compatibility line; increasing the patch version is otherwise backward-compatible within that line. All
other older ordinary versions, historical prereleases, and unreleased source snapshots are not supported unless a
separate support policy says otherwise. Historical prereleases remain outside the ordinary version compatibility
guarantee.