Don't know where to report it, but the certificate of https://matplotlib.org/ is only valid for *.github.com, github.com and *.github.io. Therefore users get a security warning.