> a bug prevention bounty program

Particularly for a dep they've chosen to ship in their browser.