Report a vulnerability privately, not in a public issue:
- GitHub private vulnerability reporting: "Report a vulnerability" on the Security tab (new advisory).
- Email lol@sinduri.lol.
- The email contact, and what the site runs, is in
/.well-known/security.txt,
generated by
src/pages/.well-known/security.txt.ts. - Accessibility barriers are not security reports: ACCESSIBILITY.md.