Until a confirmed reporting channel exists, report sensitive documentation or site security concerns privately to project maintainers. Do not publish exploitable details in public issues.