The initial v1 release line is supported with security updates:

Please report suspected vulnerabilities privately to tony@zetic.ai. Include the affected version, impact, reproduction steps, and any suggested mitigation when available.

Do not disclose a vulnerability in a public issue, discussion, or pull request. We will acknowledge the report, investigate it, and coordinate remediation and disclosure with you.