Do not include credentials, OAuth material, personal activity data, GPS tracks, or health-related metrics in public issues or pull requests.
For a suspected security or data-disclosure issue, contact the maintainer privately through the repository host rather than opening a public issue. Until a dedicated security contact is published, do not disclose exploit details or personal data publicly.