The latest published version on pub.dev receives security fixes.

Please do not open a public issue for security vulnerabilities.

Instead, report it privately using GitHub's Report a vulnerability feature (Security → Advisories), or contact the maintainer at INSERT_CONTACT_METHOD.

Please include:

• A description of the vulnerability and its impact.
• Steps to reproduce or a proof of concept.
• Any suggested fix, if you have one.

You can expect an initial response within a few days. Once the issue is confirmed and fixed, a new version will be released and credit given to the reporter (unless you prefer to stay anonymous).