Become a sponsor to Madan Kumar
Hi — I'm Madan (@winklemad).
I find and fix subtle correctness, security and API-contract bugs by reading the code, then ship the fix with a red→green regression test. No typo fixes, no drive-bys.
So far that's 52 merged pull requests across 46 organizations — Anthropic, NVIDIA, Rust, OpenAI, Meta, Google DeepMind, Apple, Docker, MongoDB, Prometheus, Cloudflare, Redis, Qdrant, EleutherAI, Svelte and pytest among them — with 57 more in review, in Python, TypeScript, Rust, Go, Java and C.
A few of them: a silent auth bypass; a tail-event serializer that threw on a BigInt and took down the whole forwarding path; a sentence splitter that dropped whitespace after a closing quote and shifted every downstream chunk offset; a hybrid search that repeated rows across paginated pages.
Sponsorship buys exactly one thing: focused hours to read more source and ship more fixes into the tools you already depend on.
→ Every merged fix: https://github.com/winklemad
0% towards $200 per month goal
Be the first to sponsor this goal!
$5 a month
SelectA thank-you and your name in the SPONSORS list on my profile. Every hour spent reading source is an hour that finds the next bug.
$25 a month
SelectEverything above, plus a short monthly note on what actually shipped upstream — the fixes, the repos, and the bug behind each one.
$100 a month
SelectEverything above. Tell me an open-source project you depend on and I'll spend real, focused time reading its code for correctness and security bugs and shipping fixes upstream. No promise of a specific outcome — just genuine effort on the code you care about.