Potential security vulnerabilities - seeking private contact

[KrisKennawayDD]

Hello, I'm a security engineer at Datadog. I have found several potential security vulnerabilities in qjs and I would like to establish a channel to communicate privately. How can I reach a maintainer out of band?

[KrisKennawayDD]

@ngocphuongnb @danslo could you please consider enabling private vulnerability reporting on this repository so I can report it privately? Alternatively could you please give me a contact email address?

[crackcomm]

@KrisKennawayDD could you please consider disclosing those vulnerabilities?

[KrisKennawayDD]

Unfortunately unless I can disclose via a maintainer I will have to wait for responsible disclosure timelines i.e. 90 days.

[danslo]

Project is no longer maintained AFAIK. I've personally moved on to a different js runtime

[KrisKennawayDD]

I see @ngocphuongnb is still actively committing to other fastschema projects so I'm hopeful they will respond here