react-starter-pro is a starter template, not a released library — there are no versioned releases. Only the current main branch is supported; fixes land there directly.

Do not open a public issue for security vulnerabilities.

Report privately via GitHub Security Advisories: go to the repository's Security tab and click "Report a vulnerability". This keeps the report private between you and the maintainer until a fix is available.

Please include:

• A description of the vulnerability and its impact
• Steps to reproduce (a minimal example helps a lot)
• Any suggested fix, if you have one

This is a solo-maintained project; you can expect a best-effort response within 7 days. Once a fix lands on main, the advisory will be published with credit to the reporter (unless you prefer to stay anonymous).