There's a saying: No good deed goes unpunished. What's right for your personal morals may conflict with the law. I'm sure most developers would appreciate the

There's a saying: No good deed goes unpunished. What's right for your personal morals may conflict with the law. I'm sure most developers would appreciate the report. But some people misunderstand things. Are unreasonable. Or psychopaths. If you want to send a report there is absolutely a need for secrecy. It may already be too late for perfect secrecy as all your actions on the internet are logged, so it's possible for the US government to determine that you were the one who downloaded source code. Unless you always use things like encryption and tor.