3 ms·
How about directly linking to the CVEs and how quickly they were mitigated and in which commit? Pay researchers to analyse repos without any. Post results. Lin
by moi2388 2y ago
How about directly linking to the CVEs and how quickly they were mitigated and in which commit?
Pay researchers to analyse repos without any. Post results. Link to the repo with mitigation PRs.
It’s insane this isn’t the standard already
- consumer451 2y ago> Pay researchers to analyse repos without any. This is the problem, the best we can do is pay via exposure. But that actually ain't nothing. Not just individuals, but also orgs could then make money from private contracts based on their reputations? This should be the benchmark of trust. Could there be anything better?