Vercel Open Source

HackerOne·19 in-scope · 0 out·updated 19d ago·RSS

Discord →open program

bountymanagedopen

first response

—

no reports yet

scope

0 out

asset mix

source_code

16 source_code · 3 other

last change

—

no history yet

In scope

019

source code16

Recent changes

— no diffs detected in snapshot history yet —

Community reports

0 reports

No reports yet — be the first to share your triage timing for Vercel Open Source.

// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.

Your notes

History

1 event

2026-08-06
first indexed
56d ago · 19 in-scope assets

// only one snapshot on record — changes appear from the next ingest onward

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/vercel-open-source",
  "name": "Vercel Open Source",
  "handle": "vercel-open-source",
  "targets": {
    "in_scope": [
      {
        "asset_type": "OTHER",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "Tier 1 OSS",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "Tier 2 OSS",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "For bounty calculation on experimental features ",
        "max_severity": "critical",
        "asset_identifier": "Tier 3 OSS",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the nitrojs repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/nitrojs/nitro",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the Nuxt repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/nuxt/nuxt",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the svelte repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/sveltejs/svelte",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the agent-skills repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel-labs/agent-skills",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the vercel-labs/skills repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel-labs/skills",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the ai-sdk  repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/ai",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the async-sema repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/async-sema",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the chat repo. This is considered \"tier 2\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/chat",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the eve repo. This is considered \"tier 2\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/eve",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the Flags repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/flags",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the ms repo. This is considered \"tier 2\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/ms",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the nextjs repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/next.js",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the swr repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/swr",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the turborepo repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/turborepo",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the Vercel repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/vercel",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "SOURCE_CODE",
        "instruction": "Please assign this to any project involving the Workflow repo. This is considered \"tier 1\"",
        "max_severity": "critical",
        "asset_identifier": "https://github.com/vercel/workflow",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": []
  },
  "website": "https://vercel.com/",
  "offers_swag": false,
  "managed_program": true,
  "offers_bounties": true,
  "submission_state": "open",
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 540,
  "response_efficiency_percentage": 90,
  "average_time_to_report_resolved": 934,
  "average_time_to_first_program_response": 3
}