🏆 Maigret Contributor Spotlight: 26 July to 30 August 2026

[soxoj]

🏆 Maigret Contributor Spotlight: 26 July to 30 August 2026

10 contributors, 22 merged pull requests in a month. Half of it is core correctness and security work rather than one-line site tweaks. Here they are.

---

🥇🥈🥉 The Podium

🥇 @ashvinctrl, Hardening Specialist

4 PRs, and the heaviest one closed a real hole: report image URLs were fetched during PDF generation with no scheme or host checks, so a crafted profile could pull local files or hit internal hosts. He also stopped the SUPPORTED_IDS branch from re-adding a username the validator had already rejected, gave report writing an explicit utf-8 encoding instead of the platform default, and kept every cookie of a domain when importing a cookies.txt.

#2908, #2907, #3007, #3031

🥈 @felicabrera, Plumbing Fixer

4 PRs in the parts nobody looks at until they break. The two HTTP transports disagreed on how a SOCKS5 proxy URL should be spelled, so --proxy silently behaved differently depending on which checker ran. Fixed. Dev builds were holding the Latest release marker and shadowing branch names. Fixed. Instapaper was answering positive for everyone, and the socid-extractor docs link pointed at nothing.

#2966, #2963, #2937, #2967

🥉 @juliosuas, The All-Rounder

3 PRs across the stack, second spotlight in a row. XMind exports now open in modern readers, --submit recognises status-code based checks in its fallback path instead of giving up, and ReverbNation stopped reporting profiles that aren't there.

#2930, #3024, #2929

---

🎖️ Top 10

#	Contributor	PRs	Highlights
4	@Sushanth012	3	Diagnostic database loading on Windows, non-string identity values in reports, ForumJizni false positive
5	@zsxh1990	2	Six Chinese sites with proper presence markers, disabled PulmonaryHypertensionNews
6	@kaifcodec	2	HuggingFace checked through the API endpoint, HackerNews moved to the HTML page to dodge API timeouts
7	@Sanjays2402	1	Found the same bug class as #2907 living in extract_ids_from_page() and brought regression tests for it
8	@locsucc	1	Added Coddy and Codédex
9	@ccyyy1023	1	Fixed the Omg.lol false-positive check
10	@USERGITHUB1234567	1	Added VNOJ, Vietnam's competitive programming judge

---

🙌 Reporters

@chrmina caught Windows Defender flagging the build, @anonimus1999 and @emq1xx sent new sites worth supporting, and @felicabrera opened the REST API request in #2968.

---

💛 Keep them coming

If you're on this list, thank you, sincerely. If you're not on it yet:

• Browse good first issues
• Adding or fixing a site is still the single most valuable thing you can do
• Tests, docs, and translations are always welcome

See you in the next PR. 🚀