Communitty is still in development.
In case of serious vulnerabilities, report them immediately to the author here.
In case of less-serious vulnerabilites, do report them. You may create a GitHub issue or use the above mail address for a private conversation