Please do not open up a GitHub issue if the bug is a security vulnerability in any @shopify/web-configs packages. Instead, please contact the current security coordinator Keyfer Mathewson directly.