How we publish about other people's projects
the rules, as of 27 Sep 2026
Only on our own copy
featkpr runs on a copy of the project we start ourselves, with users we seed. Never on anyone else's server.
The maintainers hear first
A report goes to the maintainers a week before it is public, with an invitation to reply. A suspected security bug goes to them privately, through the project's own security channel, and stays private for 90 days or until it is fixed.
We follow each project's rules
Some projects forbid AI-written reports or contributions. We read the policy first and follow it. Everything we send a maintainer is written by a person, under Tim's name.
Every report shows its work
The release it ran on, how to repeat it, what featkpr missed, and that we are not affiliated with the project.
Ask and we stop
A maintainer who wants their project left out only has to ask. How to ask →