Report a security problem privately through GitHub's private vulnerability reporting. Do not open a public issue for it.

Examples: the API key or another secret in a log, in the diagnostics file or in an entity attribute, or a way for a question or a conversation to read or control entities it was not given.

Only the latest release gets fixes. The jevclient library is in scope too; report problems with a provider's API to that provider.