I did my part! Ran cloudflare/security-audit-skill against dev-null.sh, found some issues and opened two PRs to fix them.
Commit
116244c
PR 1: stop users in timeout from starting orgs through the API https://github.com/dev-null-sh/dev-null.sh/pull/975
GitHubfix: stop users in timeout from starting orgs through the api by arjankapteijn · Pull Request #975 · dev-null-sh/dev-null.shSummary A user in timeout could still create orgs through POST /api/v1/remotes/orgs, while the web org.store refuses them. The org name reaches each added member's inbox as the "created&qu...
commit 116244c