contribute turns readers' edits into pull requests on Internet Public Library repositories, so we treat security reports as a priority.

Please do not open a public issue. Use GitHub's private reporting: Report a vulnerability.

Include what you found, how to reproduce it and the impact you expect. We aim to acknowledge reports within 5 days and to agree on a disclosure date with you.

Only the code on main, deployed as the production Worker, is supported.