This project is a set of rules and documentation, not a running service, so the usual vulnerability surface does not apply. There is one thing worth reporting privately rather than in a public issue: a rule here that is wrong in a way that would make a backend less safe if followed.

If you find that, email support@backenly.com with the rule and the problem, and give us a chance to correct it before it spreads. For anything else, a normal issue is the right place.