The main branch is our fully maintained servicable branch. If you see a security vulnerability on the main branch, please open an issue. We will review it as soon as possible. A pull request is also welcome.