Only the latest published version receives fixes.
Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting on this repository ("Security" tab > "Report a vulnerability"). You will get a response within a week.
Note that this SDK is a thin, dependency-free client: most security issues around it involve API key handling in your application. Never commit an Intervals.icu API key, and never ship one to a browser.