Post #1913848

New one today: someone found the folder where I publish pre-release CI builds of LensKit, and reported it to the Drexel bug bounty for IP leak / dependency confusion / reverse engineering risk.