When a vulnerability is fixed, a new patch version will be released (e.g. 0.6.34 -> 0.6.35).
Please email the developer (Matthew Bloch) at [email protected] to report a vulnerability.
If preferred, you can create a new draft security advisory (https://github.com/mbloch/mapshaper/security/advisories)