Feel free to report Vulnerability on the issues tab. This application is just a simple npm package, no critical information is required unless the data you are sorting or/and searching by nature is critical.