We use changeset to provide versioning for our packages with fixes, features and major release in case of breaking changes. The latest package is always the better one.
For information on how to report a new security problem please see here. Our existing security advisories are published here.