Please report vulnerabilities privately: on the repository's Security tab, choose Report a vulnerability. Do not open a public issue for them.
Supported: the latest released version (0.x). Fixes ship as a new npm version and plugin release.
LayerMap's tools only read the repository and its map. It runs locally, makes no network requests of its own, and stores maps only in the user cache (see PRIVACY.md).