Report vulnerabilities privately through GitHub: Security tab, "Report a vulnerability". Do not open a public issue.

The site is static and built from public data. The build reads GitHub and hive with a read-only token and holds no secrets beyond that.