ReNotify reads every notification on the phone, so a security problem in it matters. If you find one, please do not open a public issue. Write to dev@fluxera.us with a description and, if you have one, a way to reproduce it.
You get an answer within a few days. Once a fix is released, we are happy to credit you in the changelog if you want that.