@misc{indiciaec0aa52e16770, title = {A Deep Dive Into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports}, author = {Jessy Ayala and Steven Ngo and Joshua Garcia}, year = {2025}, doi = {10.1109/sp61157.2025.00063}, url = {https://arxiv.org/abs/2409.07670}, note = {Source identifier: 2409.07670} }