If you found a serious vulnerability in our project, feel free to send email to [email protected] with GnuPG encryption enabled (0xD45AB90A key on hkps.pool.sks-keyservers.net key server).

Built-in GitHub Security feature can be used too.