How to get in touch regarding a security concern?

[cokeBeer]

Hello 👋

I found a potential security issue in Kuboard-spray, how can I get in touch with you in a private way and submit my security report?

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.