Questions about the SDK should be sent to its Google Group.
Bugs with the SDK should be reported on the issue tracker at Github. Bugs with Facebook's Graph API should be reported on Facebook's bugtracker.
Security issues with the SDK that would adversely affect users if reported publicly should be sent through private email to the project maintainer at martey @ marteydodoo.com (GPG key ID is 0x2cd700988f74c455).