Where Do I Report A Safari Extension That May Be Fake

I just downloaded the NightLight Safari extension from the Apple Store and it required an application download. The extension didn't do as advertised (yes I'm a techy) so I went to the extension folder to see if it was turned on. It was and the information box also had info notifying the extension could read SPI inputs to all websites and all information on websites visited. The Safari extension is extremely new and the development site seems very suspect (gofake1.net).

Where do I report this?

App Store Link: Nightlight for Safari on the Mac App Store

Developer Link: https://gofake1.net/projects/nightlight.html