Comment by jannes

This is probably something that the platform HackerOne should implement. It can't be addressed on the project level.

https://hackerone.com/curl/hacktivity