Generally, a version is supported if it's
- The current version
- OR the same major and minor version as the current version
- OR the highest minor version and patch number of the last major version.
This means, with the current version of
0.17.5, the following are supported
| Version | Supported |
|---|---|
| 0.17.5 | ✅ |
| 0.17.4 | ✅ |
| 0.17.3 | ✅ |
| 0.17.2 | ✅ |
| 0.17.1 | ✅ |
| 0.17.0 | ✅ |
| 0.16.2 | ❌ |
To report a vulnerability, please contact me at either novaw@warrenservices.co.uk, or novawittam@gmail.com. If you contact both, please make it to one and cc the other. I'll try and keep you updated as I investigate and attempt a fix, and may ask for additional information. Once confirmed and fixed, I will push to NPM, mark vulnerable versions as deprecated, and release a public security advisory.