Security Reporting?

Is there a preferred way of submitting security observations for this project? GitHub has an option for configuring private vulnerability reporting available: (https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/configuring-private-vulnerability-reporting-for-a-repository)