Reporting Vulnerability: use GitHub’s issue reporting, and I will priorize security concerns.
Suggestion Security Improvements: use Github issues for that as well, and i'll consider making those improvements.
Please check Security documentation for full details