TBC

If you identify a security concern, please contact me (Andy) directly at andy at neillans dot co dot uk. I will log check this against any "known" and inprogress resolutions, and log any remediations which need to be completed.

Afraid we do not offer a bounty programme.

We do operate Dependabot and will routinely (attempt!) to keep dependencies updated and track discovered issues via this.