Safe to use .serialize / .parse to send data from client to server?

I was wondering if it was safe to use `devalue.serialize(...)` and `devalue.parse(...)` to send values from client to server? (serialize on client, parse on server)

I'm asking because I see the mention of security issues on the README with `uneval` espacially. And I was wondering if it was concerning `.parse` too indirectly?