Please report package or build-pipeline security issues privately through GitHub's security advisory interface for this repository. Typography and glyph rendering defects can be filed as regular issues.