> Heck even a tweet at the owner might be good enough.
I disagree with this, don't spam people. Sometimes people even go out of their way to contact you using multiple channels and it gets even more annoying.
Kind of depends... I'm listening to so many github repos that I often don't pay enough attention to the notices or even keep up regularly... if it's important/urgent, I'd almost preferred that they reach out via side channel. It's a rare case for me at least.
I know it can be annoying if there's too much of it, or there's too many vectors or if you or the repo are popular. I'm not.
> There is no need to abuse the maintainer, repeatedly post the bug, harass them over twitter.
So I think the sentence you quote is meant as a first approach.