If you wish to report a bug or request a new feature, please use GitHub Issues:
The Zero Install project has a mailing list, which can be used for suggestions, questions, etc.:
If possible, please send questions and comments to the mailing list, so that other people see them and they appear in the searchable archives. It's also more likely that you'll get a reply if more people see your question. Messages sent directly to maintainers may be ignored or forwarded to the mailing list first unless you specifically ask them not to do this.
Reports of security bugs should be emailed directly to the maintainer of the relevant component. This is probably the last person to announce a release of it on the mailing list. You can also check the component's Git log to get the email address to use if you're not sure.