Huntr by 418sec VS rysolv

I have disclosed this issue on the huntr.dev platform. Supposedly, maintainers with write access to the repository should be able to see the details in the following private submissions: https://huntr.dev/bounties/2469c3af-088c-468e-a37f-d35c01256d2f/. Source: over 1 year ago

This update includes many QoS improvements for the app. The important one is fixing some critical security bugs. Thanks to Huntr.dev and their researchers for helping with testing and reaching out to notify us of the vulnerability. Source: over 1 year ago

Https://issuehunt.io/issues https://www.bountysource.com/ https://huntr.dev/ Taken from https://www.google.com/search?client=firefox-b-d&q=open+source+bounty. - Source: Hacker News / almost 2 years ago

About a month back, I reported what I think is a security issue in the tensorflow/models repository. I disclosed this bug via huntr.dev as they had previous submissions to the repository. The security policy of the repository states that the security team gets back within 24 hours but it's been a month and I haven't heard back from them. The members at huntr.dev were kind enough to leave the following comment but... Source: almost 2 years ago

Currently, on huntr.dev, a user submits the report directly to the maintainer. The maintainer will then choose to mark it as valid or as invalid. When marking as valid, the maintainer receives a disclaimer that by clicking valid they agree that: 1) the security issue is valid and that 2) huntr may assign a CVE for the repository. So no, there was no automatic process that got triggered when the maintainer merged a... Source: about 2 years ago

There is a word filter you can set up, if you have better ideas or something that exists on reddit submit an issue here , maybe set up a bounty on rysolv or donate because I worry they won't have the resources to handle all this popularity. Source: 11 months ago

In my opinion it isn't marketed well, if a highly popular project will have a link to rysolv on it's website and github page it could get a decent amount of contributions and iirc there was at least one big project that was funded using bounties. Source: about 1 year ago

Better to ask in the community of the implementation, and the best option is probably a bug tracker (adding a bounty on a platform like rysolv could also help). Source: about 1 year ago

A while ago I went over these types of platforms, the best IMO is rysolv. Source: over 1 year ago

Rysolv can also show the most funded issues on the platform and per project (and is last I checked the best open source platform for bounties), it can also be a "low cost" improvement, all you need to do is link to it on the KDE website or the readme of some projects. Source: over 1 year ago