| Version | Supported |
|---|---|
| 0.1.x | ✅ |
If you discover a security vulnerability, please report it privately:
- Do not open a public issue
- Email: mrsirstern@gmail.com
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
You can expect:
- Initial response within 48 hours
- Regular updates on progress
- Credit in the security advisory (if desired)
When using this library:
- Keep dependencies updated: Regularly update to the latest version
- Review generated files: Check generated TypeScript files before committing
- Validate CSS input: Ensure CSS files come from trusted sources
- Enable debug mode cautiously: Debug mode logs file paths and may expose sensitive information
- The library parses CSS files and resolves
@importstatements - File system access is required for CSS parsing
- Generated TypeScript files should be reviewed before deployment