Only the latest branch (main) receives active security patches.
If you discover a vulnerability or a flaw in the deterministic conflict resolution rule, please DO NOT open a public issue. Email security@halopay.app directly. We will issue a patch within 48 hours.