Do not open a public issue for security problems. Use GitHub private vulnerability reporting for this repository. Include a description of the issue, the affected package versions, and steps to reproduce if applicable.

You will receive a response as soon as the report is triaged. Please keep the details private until a fix is published.

• Vulnerabilities in the published @moduix/* packages and their generated registry output.
• Vulnerabilities in the documentation site deployment (Cloudflare Workers assets).

Third-party dependency vulnerabilities are welcome as reports, but actionable fixes usually require the upstream project; still, report them so we can track and upgrade.

Only the latest published versions of the @moduix/* packages receive security fixes.