Report vulnerabilities to security@afterpack.dev — never in a public issue or pull request.

Include a description of the issue, the affected package and version, and steps to reproduce it. We will acknowledge your report and follow up with next steps.

For anything else, reach us at support@afterpack.dev.