Security fixes are released for the latest minor version of agentfaces.

Please do not open a public issue. Report it privately through GitHub security advisories, or by email to ajibadehammed@gmail.com.

You can expect an acknowledgement within three working days and a fix or a plan within fourteen days. You will be credited in the release notes unless you prefer otherwise.

Agentfaces has no runtime dependencies. Every npm release is published from GitHub Actions with provenance, so you can verify that a published version was built from this repository.