I think any user should be responsible for vetting their tech choices. Why would the author put a disclaimer instead of fixing the issues?
In this case, the project is clearly too new/unstable/insecure to use in any real sense. It's presence as #1 on HN says more about the audience than the project itself I think.