Security fixes are provided for package lines that are currently documented as supported.

Please do not open a public issue for a suspected vulnerability.

Use GitHub's private vulnerability reporting / security advisory flow for this repository when available. Include a clear description, affected versions, reproduction details, and expected impact.

Security reports will be reviewed before public disclosure or release notes are prepared.