discuss shows and posts comments on Internet Public Library pages, including comments posted by the IPL GitHub App for ORCID users, so we treat security reports as a priority.

Please do not open a public issue. Use GitHub's private reporting: Report a vulnerability.

Include what you found, how to reproduce it and the impact you expect. We aim to acknowledge reports within 5 days.

Only the code on main, deployed as the production Worker, is supported.