The published page is a static site with no server-side components. The latest main branch is always the supported version.
Please report security issues privately using GitHub Security Advisories.
You can expect an acknowledgement within 72 hours. Once a fix is available, the vulnerability will be disclosed responsibly after it has been resolved.