Hello, I have identified a vulnerability in this NPM package. Can you please enable private vulnerability reporting so that I can request a security advisory and then apply for a CVE from MITRE? Here is detailed steps for how to do it:
private-vulnerability-reporting-for-a-repository