v5.0.0: v5.0.0 is a complete product overhaul with sweeping, authorized breaking changes (see ADR006). Now that v5.0.0 has shipped, only the latest major is supported — 4.x (and earlier) receive no further fixes, including the concurrency issues already tracked in ADR001.

Please report (suspected) security vulnerabilities to frcerqueira@live.com. If the issue is confirmed, we will release a patch as soon as possible depending on complexity.