This library follows semantic versioning. Security fixes are released against the latest published 0.x minor version. Older versions are not maintained.

Please report suspected vulnerabilities privately rather than opening a public issue.

• Use GitHub's Report a vulnerability (Security → Advisories), or
• Email tmunoz@umd.edu with details and reproduction steps.

We aim to acknowledge reports within a few business days and will coordinate a fix and disclosure timeline with you. This is a client-side rendering library with no server component; please include the manifest or input that triggers the issue.