Node.js Sets New Standard for HackerOne Reports, Demands Signal of 1.0 or Higher

Node.js, via the OpenJS Foundation, has updated its HackerOne bug bounty rules to require a minimum Signal score of 1.0 for direct vulnerability submissions, aiming to reduce low-quality reports that have overwhelmed triage resources. Researchers below the threshold can still engage through the OpenJS Foundation Slack to discuss potential issues, maintaining accessibility while improving the signal-to-noise ratio and response times for critical vulnerabilities.