[Inkscape-board] Security Bug Rewards

Dear Board,

Under my role as website administrator I got an unsolicited email from 'Freddie D. Silva' in which he documented five bugs in the inkscape.org deployment which would be security issues.

After fixing the issues and thanking the contributor for their valuable service, they then asked for a security bounty.

I've tried a couple of times to explain that Inkscape is a volunteer project and I've offered to add a credit and link to the website instead. But they don't seem to understand or be interested.

I'm bringing this to the board's attention so that I can get some feedback on how to deal with this kind of contributor-case.

Thanks for your input.

Best Regards, Martin Owens