Please don't open a public issue for security problems. Report them privately through GitHub: on this repository's Security tab, choose Report a vulnerability. We'll acknowledge the report and keep you updated while we fix it.

Include what's affected (the SDK, the collector, the dashboard, sign-in, or the console), how to reproduce it, and the impact you see. Never include real API keys, tokens, or other people's data.

Security fixes go into the latest release of @rawtree/analytics and the main branch.