Only the latest version of WCAGify published to npm is supported. If you find a security issue, please check it still exists in the latest version before reporting it.

If you find a security issue, please do not open a public issue.

Instead, report it privately using GitHub's private vulnerability reporting for this repository: https://github.com/abbott567/wcagify/security/advisories/new

You should get an acknowledgement within a few days. Once the issue is confirmed, a fix will be published to npm and noted in the changelog, and you will be credited if you would like to be.