Please report any security issues you discovered in the API to lucastesson@protonmail.com.
We will assess the risk, plus make a fix available before we create a GitHub issue.
In case the vulnerability is into a CVSS specification, do not report this to us but refer to first.org.
Thank you for your contribution.
To refer to this repository using a CPE v2.3, please use cpe:2.3:a:pandatix:js-cvss:*:*:*:*:*:*:*:* with the version set to the tag you are using.