Security fixes target the current @glucoseiq/* release line. Maintainers may decline fixes for older releases.

Send vulnerability reports through a private GitHub security advisory. Do not open a public issue for a suspected vulnerability.

Include the affected package and version, impact, and the smallest reproduction you can provide. Use synthetic data only. Do not include real health information, credentials, access tokens, or production records in a report or reproduction.