Please only report issues that are present in the latest commit on the master branch.
As this is an A/D CTF tool, most people will not run long-term publicly reachable instances. As such, feel free to report security issues directly in the github issues tracker.
If you prefer an email contact, you can email tulip-sec<at>bricked.tech.