Their website has got some security issues too but I couldn’t get anyone at the project to give me a place where I could disclose them. I guess public issues are the answer. 😎