Notice on Dependencies

[Rsync25]

We are aware of the September 8, 2025 npm supply chain attack that temporarily compromised several widely used packages (including debug, chalk, and related dependencies).

After review, we confirm that:

• No npm packages published by this organization were affected or compromised.
• Our packages do not depend on the malicious versions released during the incident.
• All builds and dependencies have been reviewed and verified as safe.

We will continue to monitor the npm ecosystem and apply security best practices to protect our users.