Found a security issue? Thanks for helping keep nullish safe.
Report a vulnerability
Section titled “Report a vulnerability”Please don't disclose it publicly until it's fixed. Report it through:
Include what you found, how to reproduce it, its potential impact, and any idea you have to fix it.
We answer promptly and release a fix as soon as possible once the issue is confirmed.
Disclosure
Section titled “Disclosure”Once a fix is released, we disclose the issue publicly. If there's still no fix after 90 days, we disclose it anyway.
Supported versions
Section titled “Supported versions”Only the latest version of nullish receives security fixes.