Sajeeb Lohani (sml555 / prodigysml)

That's a really good idea! Maybe something like bucket sorting by the company's name (e.g. `apple` in `a`, `bugcrowd` is in `b`, etc.), might be a way to organise things....

Yup that's what I meant! Hmm didn't think about the collisions honestly. Your idea sounds good but maintainers will need to make sure they merge careful and don't duplicate data.

If we don't hear back within the next two weeks, we'll prolly just hardcode a skip in the action (yes, smelly, but best we can do without the action going...

Yeah, we will need a hardcoded skip for it. Happy to put it in if we agree that's the way we want move forward

@bloatware yes they have protected against the XML bomb to a certain extent. It is still pretty simple to recreate an XML bomb. All we have to do is ensure...

Sure thing @bloatware I would've put it up earlier, just didn't really want to make it public. I guess anyone who wants to exploit it can use learn about XML...