Reporting Security Issues

[atrompler]

Is there a preferred way of submitting security observations for this project?

GitHub has an option for configuring private vulnerability reporting available, if that would be of interest: (https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/configuring-private-vulnerability-reporting-for-a-repository)