Is there a security contact for flathub.org?

Is there a security contact for the contents of the flathub.org repository? Assuming, something is wrong with a flatpak package, who can be contacted, and how?