This project just has commit hashes and no version numbers, but generally, unless a major vulnerability is discovered, about 10 commits behind on your install should be fine.

Email me if you find a CVE