JSS is pre-alpha. Reports are handled in the open unless you ask otherwise.

• Report a problem: open an issue at https://github.com/JavaScriptSolidServer/JavaScriptSolidServer/issues. If you would rather report privately, email the maintainer (see MAINTAINERS.md) or use GitHub's private vulnerability reporting on this repository when it is enabled.
• What to include: the version (jss --version or package.json), the request or steps that show the problem, and the fix you would make if you have one.
• What happens next: we confirm against the code, open an issue, fix it in a pull request that names the reporter (unless you ask not to be named), and release. Past audits are in SECURITY-AUDIT-*.md.
• Scope: anything in this repository. Deployments, plugins and client libraries have their own repositories.