To report a security issue publicly, create a new Issue and label it with "security".
To report a security issue discretely, e-mail robvanderleek@gmail.com and include the word "SECURITY" in the subject line.
If you have suggestions on how this process could be improved please submit a pull request or file an issue to discuss.