This is a hobby project, provided "as is" under the MIT license.
Security updates are not guaranteed.
If you discover a security issue, you can open an issue or pull request on GitHub.
There is no formal response timeline, but contributions are welcome.