Security policy

Please report a package that does something it doesn't declare, hides what it does or puts your data at risk privately, through GitHub's private vulnerability reporting, not in a public issue. The same goes for a problem in how this repository checks or publishes packages. Include the package and version, what it does, and the file and line where it happens.

Please keep the report private until the package is fixed or removed from the store.