Security fixes are provided for the latest release line.
Please report vulnerabilities through GitHub private vulnerability reporting:
https://github.com/wangxpych/lockfile-review/security/advisories/new
Do not include credentials, private lockfiles, or private repository contents in public issues. A minimal fixture with fictional package names is preferred.