Only the latest major version of the library will get security updates by default. If you can't migrate to the latest major version and there's a critical vulnerability then let me know and I'll see what I can do.
This repo has private vulnerability reporting enabled on GitHub. If you have a vulnerability to report, please follow this process. Do not publicly disclose a vulnerability, e.g. via a GitHub Issue.