So, because this is not a thing that can produce security problems in the project using it, security policy is very simple: supported only the last major or minor branch.

If you found something that in your opinion may produce any security problem, please create a new issue.