Hey everyone, I'm bringing on a contributor whose specific focus is keeping an eye on Bambuddy's security going forward. What the role looks like: Track the dev branch and flag changes touching auth, permissions, token handling, or the CI security backstops. Async post-merge, so it doesn't gate in-flight PRs — findings get raised before the next release cut. What I'm looking for: A habit of fail-closed thinking. Knowing why "except Exception: return <permissive>" is dangerous by default matters more than formal background. Comfortable reading FastAPI + SQLAlchemy on the backend and a small React/TypeScript surface on the frontend. Time commitment is whatever you can spare. No fixed schedule, no SLA. If interested, or you know someone who'd fit, email martin@bambuddy.cool. Happy to chat about the shape before any commitment. Martin

For everyone sponsoring Bambuddy on GitHub Sponsors — or thinking about it — the new sponsors portal is live: https://sponsors.bambuddy.cool What it does: Sign in with the GitHub account you sponsor with — your tier shows up automatically Monthly sponsors newsletter (the same one that used to land as a pinned Issue in the private sponsors repo) Quarterly roadmap vote for Patron tier and above Email notifications when a new newsletter publishes or a vote opens What changes for existing sponsors: The Discord "Backer / Supporter / Patron / ..." roles are gone. Discord stays exactly as it is for community use, just without the sponsor-tier channels. The private bambuddy-sponsors repo will be archived once the migration settles — newsletter + voting now live on the portal. BACKERS.md on the main repo still lists everyone (Backer and above). Backer tier is intentionally off-portal — the perk stays the BACKERS.md listing, no portal sign-in needed. What didn't change: All the actual tier perks. Supporter still gets newsletter, Patron still gets voting, Sustaining still gets the README listing and direct email line, Corporate still gets priority response and logo placement. Just delivered through a more reliable channel. Discord remains the general community hangout. If you sponsor and your name isn't showing on the portal within an hour, email martin@bambuddy.cool or open an Issue on the main repo. — Martin