Security reports are accepted for this repository's official bundle packages and registry metadata.
Please report vulnerabilities privately to [email protected].
Include:
- affected component/file
- reproduction steps
- impact assessment
- suggested remediation (if available)
Do not open public issues for undisclosed vulnerabilities.