Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting: https://github.com/jml6m/fas-js/security/advisories/new
You will get an acknowledgement within 7 days.
Only the latest minor version on npm receives security fixes.