Please don't open a public issue. Use GitHub's private vulnerability reporting. Expect a reply within a week.
The scraper, the build scripts, the GitHub Actions workflows and the published site. Job listings link to third-party employer pages; report problems with those to the employer.