Update CLA and bug bounty
Author: Marcono1234Created Jul 21, 2026Updated Jul 21, 2026
(related to #4704)
Currently CLA and bug bounty still point to Square sites:
- https://github.com/lysine-dev/retrofit/blob/d0b112dad073b7fe49c953ebc46ff1b424cb1e51/website/src/content/docs/contributing.md?plain=1#L7
- https://github.com/lysine-dev/retrofit/blob/d0b112dad073b7fe49c953ebc46ff1b424cb1e51/.github/CONTRIBUTING.md?plain=1#L15
- https://github.com/lysine-dev/retrofit/blob/d0b112dad073b7fe49c953ebc46ff1b424cb1e51/BUG-BOUNTY.md?plain=1#L9
Is the CLA even still needed?
For bug bounty, respectively rather vulnerability reporting, maybe just add a SECURITY.md instead and point to GitHub's private vulnerability reporting (https://github.com/lysine-dev/<REPOSITORY>/security/advisories/new), which you have apparently already enabled.
Same applies to the other Lysine projects as well.
Thanks for transferring these repositories to Lysine and continuing their development!
Source: lysine-dev/retrofit