Touch Grass is pre-1.0. Only the latest published version of @touch-grass-ds/tokens and @touch-grass-ds/react is supported. Older versions will not receive security fixes — please upgrade.

If you find a security issue, do not open a public GitHub issue. Instead, report it privately:

• Open a private security advisory on GitHub, or
• Email the maintainer directly (see GitHub profile)

You can expect an initial response within 7 days. If the issue is confirmed, a fix will ship in the next patch release and you'll be credited in the changelog (unless you prefer to stay anonymous).