You can report low severity bugs as issues on this repository.

However, for higher severity vulnerabilities and bugs, please email security@is-a.dev.