E-mail urgent security issues to: security@johnqdeveloper.com (i.e. Major problems) If you are doing automated scans or other low impact security bugs, just open an issue. You will be blocked if you send automated scans to the e-mail or ask for money.