The Norway Data API is public and read-only: it has no accounts, keys, or user data, and it doesn't store anything about requests beyond the platform's standard logs (which don't include request bodies).
To report a security problem, use GitHub's private vulnerability reporting: go to this repository's Security tab and select Report a vulnerability. Please don't open a public issue for it.
Expect a reply within a week. This is a personal project with no bug bounty.