Responsible disclosure of security vulnerability

[kevgeoleo]

Hi,

I would like to report a vulnerability which I found in your npm package predefine
In accordance with responsible disclosure practices, I would be happy to report it via a GitHub security advisory (https://github.com/bigpipe/predefine/security/advisories/new) and coordinate with you on a fix.

Best regards,
Kevin