Use HTTPS, please purchase a SSL certificate.

[ghost]

I know these can be expensive, maybe reach out to the community for funding if you need to. I would be more than willing to contribute. It's just hard to take the project seriously from a security perspective regardless if you have the code posted on the site if when you go to visit the site it warns you and it's not encrypted.

[Vonor]

+1 for SSL Cert
However, with LetsEncrypt it doesn't even cost money.