Eclipse Foundation encourages developers to find vulnerabilities in Open VSX Registry – but no money is offered.
The model that changed my mind has never heard of small talk.