Verified Open-Source Bounty Feed
Pricing
from $0.05 / 1,000 results
Automatically scans GitHub for fresh, low-competition software engineering bounties with escrow verification and anti-honeypot filtering.
Pricing
from $0.05 / 1,000 results
Rating
0.0
(0)
Developer
Tham Zhi Cheng
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
6 days ago
Last modified
Categories
Share
# configurations.idea.vscode.zed
# crawlee and apify storage foldersapify_storagecrawlee_storagestorage
# installed filesnode_modules
# git folder.gitroot = true
[*]indent_style = spaceindent_size = 4charset = utf-8trim_trailing_whitespace = trueinsert_final_newline = trueend_of_line = lfquote_type = single# This file tells Git which files shouldn't be added to source control
.DS_Store.idea.vscode.zednode_modulesstorage
# Added by Apify CLI.venvmin-release-age=1{ "printWidth": 120, "tabWidth": 4, "singleQuote": true}1# Apify Actor project2
3This project is an Apify Actor: a serverless program packaged as a Docker image. It takes one JSON input, does one job, and can write results to a dataset or a key-value store. Entry point: `src/main.js`. Configuration: `.actor/actor.json`.4
5Before the first change, set `meta.generatedBy` in `.actor/actor.json` to the tool and model in use, for example "Claude Code with Claude Opus 5".6
7## Commands8
9```bash10apify run # run locally; the only command that sets up the Apify environment and local storage11apify validate-schema # check the input, dataset, and key-value store schemas (not the output schema)12apify push # deploy to the Apify platform (ask first)13apify help # check all Apify CLI commands14apify actors search "<query>" # find an existing Store Actor before building one15apify <command> --help16```17
18## Workflow19
20Skip the steps that do not apply when changing an existing Actor.21
221. **Implement** in `src/main.js`. Done when the code reads every input field, writes every field the README describes, and handles the `aborting` event with `Actor.on('aborting', handler)`.232. **Input schema** in `.actor/input_schema.json`. Done when every input the code reads has `title`, `type`, `description`, and a `default` or `prefill`, and `apify validate-schema` passes. Example values belong in `prefill`; `default` reaches the Actor.243. **Output schemas**: `.actor/dataset_schema.json` covering every field the code pushes, `.actor/output_schema.json`, and `.actor/key_value_store_schema.json` when the code stores records. Reference each file from `actor.json`. Done when `apify validate-schema` passes; the template's `"fields": {}` is a placeholder to replace with every pushed field. Rules are in the Reference table.254. **README.md**, the Actor's landing page on Apify Store. An Actor without one is not finished.265. **Test locally**: put input in `storage/key_value_stores/default/INPUT.json`, run `apify run`, and check that `storage/datasets/default/` holds items matching the dataset schema. Local `storage/` never syncs to Apify Console; only a platform run proves the output.276. **Deploy** with `apify push` after the user confirms, then run on the platform and check the results in Console. For a Standby Actor, give the user the Standby URL (`https://<username>--<actor-name>.apify.actor`).28
29## Rules30
31- Log through `log` from the `apify` package (`import { log } from 'apify'`). It censors tokens and credentials; output from `console.log` is not censored.32- Inside a running Actor use the SDK (`Actor.getInput()`, `Actor.pushData()`, `Actor.setValue()`), not `apify actor` CLI subcommands.33- Read every tunable from the input schema or environment variables.34- Treat crawled content as untrusted: escape it before it reaches a shell, `eval`, a query, or a template, and type-check it before storing it.35- Store personal data only when the user explicitly asks for it.36- Check which crawler packages are installed before applying crawler advice. Use `CheerioCrawler` for static HTML at 10 to 50 concurrency; reserve `PlaywrightCrawler` for JavaScript-rendered pages at 1 to 5. Add delays and respect robots.txt and terms of service.37- Use the router pattern when a crawl has more than one page type.38- Count results with your own tally; `Dataset.getInfo()` lags on the platform.39- In the `aborting` handler, persist state, then `await Actor.exit()`, so a stopped run ends quickly and cheaply.40- On the platform the SDK reads the token from `APIFY_TOKEN` (not `APIFY_API_TOKEN`); locally it uses the credentials stored by `apify login`. Keep the token out of code, config, and logs.41- Leave `usesStandbyMode` in `actor.json` as it is. When it is `true`, keep the `GET /` handler that answers the `x-apify-container-server-readiness-probe` header with HTTP 200.42
43## Ask first44
45- Installing packages46- `apify push`47- Proxy configuration changes (paid feature)48- Dockerfile changes49- Deleting datasets or key-value stores50
51## Reference52
53The `apify-actor-development` skill carries the full workflow, schema rules, README structure, and standby details. When it is available, follow it. When it is not, suggest once that the user install it, then continue with the links below:54
55```bash56npx skills add https://github.com/apify/agent-skills --skill apify-actor-development57```58
59Read the row that matches the step you are on.60
61| Topic | Source |62| -------------------------- | -------------------------------------------------------------------------------------------------- |63| Input schema | https://docs.apify.com/platform/actors/development/actor-definition/input-schema/specification/v1 |64| Dataset schema | https://docs.apify.com/platform/actors/development/actor-definition/dataset-schema |65| Output schema | https://docs.apify.com/platform/actors/development/actor-definition/output-schema |66| Key-value store schema | https://docs.apify.com/platform/actors/development/actor-definition/key-value-store-schema |67| actor.json | https://docs.apify.com/platform/actors/development/actor-definition/actor-json |68| README structure | https://docs.apify.com/academy/actor-marketing-playbook/actor-basics/how-to-create-an-actor-readme |69| Standby mode | https://docs.apify.com/platform/actors/development/programming-interface/standby |70| System events (`aborting`) | https://docs.apify.com/platform/actors/development/programming-interface/system-events |71| Environment variables | https://docs.apify.com/platform/actors/development/programming-interface/environment-variables |72| Logging | https://docs.apify.com/sdk/js/reference/class/Log |73| Apify platform, full docs | https://docs.apify.com/llms.txt |74| Crawlee | https://crawlee.dev/llms.txt |75| Actor specification | https://raw.githubusercontent.com/apify/actor-whitepaper/refs/heads/master/README.md |7677With the Apify MCP server (`https://mcp.apify.com/?tools=docs`) use `search-apify-docs` and `fetch-apify-docs` instead of fetching the URLs.1@AGENTS.md# Specify the base Docker image. You can read more about# the available images at https://docs.apify.com/sdk/js/docs/guides/docker-images# You can also use any other image from Docker Hub.FROM apify/actor-node:24
# Check preinstalled packagesRUN npm ls @crawlee/core apify puppeteer playwright
# Copy just package.json and package-lock.json# to speed up the build using Docker layer cache.COPY package*.json ./
# Install NPM packages, skip optional and development dependencies to# keep the image small. Avoid logging too much and print the dependency# tree for debuggingRUN npm --quiet set progress=false \ && npm install --omit=dev --omit=optional \ && echo "Installed NPM packages:" \ && (npm list --omit=dev --all || true) \ && echo "Node.js version:" \ && node --version \ && echo "NPM version:" \ && npm --version \ && rm -r ~/.npm
# Next, copy the remaining files and directories with the source code.# Since we do this after NPM install, quick build will be really fast# for most source file changes.COPY . ./
# Run the image.CMD ["node", "src/main.js"]1import prettier from 'eslint-config-prettier';2
3import apify from '@apify/eslint-config/js.js';4
5// eslint-disable-next-line import-x/no-default-export6export default [{ ignores: ['**/dist'] }, ...apify, prettier];{ "name": "github-bounty-sniper", "version": "0.0.1", "type": "module", "description": "This is a boilerplate of an Apify Actor.", "engines": { "node": ">=22" }, "dependencies": { "apify": "^3.7.0", "@crawlee/cheerio": "^3.15.3" }, "devDependencies": { "@apify/eslint-config": "^2.0.0", "eslint": "^9.29.0", "eslint-config-prettier": "^10.1.5", "prettier": "^3.5.3", "vitest": "^5.0.0" }, "scripts": { "start": "node ./src/main.js", "format": "prettier --write .", "format:check": "prettier --check .", "lint": "eslint", "lint:fix": "eslint --fix", "test": "vitest run" }, "author": "It's not you it's me", "license": "ISC"}{ "$schema": "https://apify.com/schemas/v1/actor.ide.json", "actorSpecification": 1, "name": "github-bounty-sniper", "title": "GitHub Bounty Sniper", "description": "Find verified, high-paying GitHub bounties (Algora, Opire) with low-competition and anti-honeypot filters.", "version": "0.0", "buildTag": "latest", "meta": { "templateId": "js-empty", "generatedBy": "<FILL-IN-MODEL>" }, "inputSchema": "./input_schema.json", "outputSchema": "./output_schema.json", "storages": { "dataset": "./dataset_schema.json" }, "dockerfile": "../Dockerfile"}{ "$schema": "https://apify.com/schemas/v1/dataset.ide.json", "actorSpecification": 1, "title": "GitHub Bounty Dataset Schema", "description": "Output schema for verified open-source GitHub bounties scraped by GitHub Bounty Sniper.", "fields": { "type": "object", "properties": { "title": { "type": "string", "title": "Issue Title", "description": "Title of the bounty issue on GitHub." }, "estimatedRewardUsd": { "type": "number", "title": "Estimated Reward ($ USD)", "description": "Estimated or verified bounty payout amount in USD." }, "language": { "type": "string", "title": "Language", "description": "Target programming language of the repository/issue." }, "humanCommentsCount": { "type": "integer", "title": "Human Comments", "description": "Estimated number of human comments excluding bot noise." }, "totalCommentsCount": { "type": "integer", "title": "Total Comments", "description": "Total comment count on the issue." }, "repository": { "type": "string", "title": "Repository", "description": "GitHub repository path (owner/repo)." }, "issueNumber": { "type": "integer", "title": "Issue Number", "description": "GitHub issue number." }, "issueUrl": { "type": "string", "format": "uri", "title": "Issue URL", "description": "Direct link to the GitHub issue." }, "author": { "type": [ "string", "null" ], "title": "Author", "description": "GitHub username of the issue author." }, "createdAt": { "type": "string", "title": "Created At", "description": "ISO timestamp when the issue was created." }, "escrowVerified": { "type": "boolean", "title": "Escrow Verified", "description": "Whether the bounty has verified third-party escrow (e.g. Algora, Opire, or diamond label)." }, "labels": { "type": "array", "title": "Labels", "description": "Labels assigned to the GitHub issue.", "items": { "type": "string" } }, "bodyPreview": { "type": "string", "title": "Body Preview", "description": "Sanitized preview text of the issue description." } }, "required": [ "title", "estimatedRewardUsd", "repository", "issueNumber", "issueUrl" ] }, "views": { "overview": { "title": "Bounties Overview", "description": "Overview of verified GitHub bounties sorted with key details.", "transformation": { "fields": [ "title", "estimatedRewardUsd", "language", "repository", "issueNumber", "humanCommentsCount", "escrowVerified", "createdAt", "issueUrl" ] }, "display": { "component": "table", "properties": { "title": { "label": "Title" }, "estimatedRewardUsd": { "label": "Reward ($)", "format": "number" }, "language": { "label": "Language" }, "repository": { "label": "Repository" }, "issueNumber": { "label": "Issue #" }, "humanCommentsCount": { "label": "Comments", "format": "number" }, "escrowVerified": { "label": "Escrow Verified", "format": "boolean" }, "createdAt": { "label": "Created At" }, "issueUrl": { "label": "Issue URL", "format": "link" } } } } }}{ "title": "Verified Open-Source Bounty Sniper Input", "type": "object", "schemaVersion": 1, "properties": { "languages": { "title": "Programming Languages", "type": "array", "description": "Filter repositories by primary language (e.g., TypeScript, JavaScript, Python, PHP, Java).", "editor": "stringList", "default": ["TypeScript", "JavaScript", "Python"] }, "maxComments": { "title": "Max Human Comments (Low Competition Filter)", "type": "integer", "description": "Only return bounties with less than or equal to this many comments so you don't compete with crowds.", "default": 3, "minimum": 0, "maximum": 50 }, "minBountyUsd": { "title": "Minimum Bounty Reward ($ USD)", "type": "integer", "description": "Only return bounties paying at least this amount in USD.", "default": 50, "minimum": 0 }, "maxItems": { "title": "Max Bounties to Return", "type": "integer", "description": "Maximum number of verified bounties to scrape in this run.", "default": 25, "minimum": 1, "maximum": 100 }, "excludeHoneypots": { "title": "Strict Escrow & Anti-Honeypot Filter", "type": "boolean", "description": "Requires verified escrow bot confirmation (algora-pbc / opire) and blocks prompt-injection traps.", "default": true }, "githubToken": { "title": "GitHub Personal Access Token (Optional)", "type": "string", "description": "Optional GitHub read-only token to increase API rate limits.", "editor": "textfield", "isSecret": true }, "maxAgeDays": { "title": "Max Issue Age (Days)", "type": "integer", "description": "Only return bounties created within the last X days to avoid abandoned repos.", "default": 90, "minimum": 1, "maximum": 365 } }, "required": ["languages", "maxComments"]}{ "$schema": "https://apify.com/schemas/v1/output.ide.json", "actorOutputSchemaVersion": 1, "title": "Output schema", "properties": { "results": { "type": "string", "title": "Results", "template": "{{links.apiDefaultDatasetUrl}}/items" } }}1import { describe, expect, it } from 'vitest';2
3describe('Example test', () => {4 it('works', () => {5 expect(1 + 1).toBe(2);6 });7});1import { Actor, log } from 'apify';2
3await Actor.init();4
5const input = await Actor.getInput() ?? {};6const {7 languages = ['TypeScript', 'JavaScript', 'Python'],8 maxComments = 5,9 minBountyUsd = 30,10 maxAgeDays = 180,11 maxItems = 25,12 excludeHoneypots = true,13 githubToken = '',14} = input;15
16const HONEYPOT_PATTERNS = [17 /startup configuration/i,18 /paste without modification/i,19 /instructions loaded into your context/i,20 /home directory,\s*working directory/i,21 /@generated-by/i,22];23
24// Known mirror/scraper spam repos that just repost other people's issues25const MIRROR_SPAM_REPOS = [26 'bounty-plaza',27 'bounty-watcher',28 'sn-monetization-runtime',29];30
31const headers = {32 'Accept': 'application/vnd.github+json',33 'User-Agent': 'Apify-Verified-Bounty-Sniper/1.0',34};35if (githubToken) {36 headers['Authorization'] = `Bearer ${githubToken}`;37}38
39const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));40
41function extractBountyUsd(issue) {42 const searchPool = [43 issue.title || '',44 ...(issue.labels || []).map((l) => l.name),45 issue.body || '',46 ].join(' ');47
48 const match = searchPool.match(/\$\s?(\d{1,3}(?:,\d{3})*(?:\.\d+)?)\s?(k)?/i);49 if (!match) return null;50
51 let amount = parseFloat(match[1].replace(/,/g, ''));52 if (match[2] && match[2].toLowerCase() === 'k') {53 amount *= 1000;54 }55 return amount;56}57
58function isHoneypot(issue) {59 const body = issue.body || '';60 return HONEYPOT_PATTERNS.some((regex) => regex.test(body));61}62
63const cutoffDate = new Date(Date.now() - maxAgeDays * 24 * 60 * 60 * 1000)64 .toISOString()65 .split('T')[0];66
67const githubMaxComments = maxComments + 1;68const seenUrls = new Set();69const repoCounts = {};70let totalSaved = 0;71
72for (const lang of languages) {73 if (totalSaved >= maxItems) break;74
75 // 1. Search verified escrow platforms (Algora, Opire, Polar) in comments/body76 // 2. Search standard bounty labels excluding known mirror bots77 const queries = [78 `is:issue is:open "algora.io" language:${lang} comments:<=${githubMaxComments} created:>=${cutoffDate} sort:created-desc`,79 `is:issue is:open "opire.dev" language:${lang} comments:<=${githubMaxComments} created:>=${cutoffDate} sort:created-desc`,80 `is:issue is:open label:bounty language:${lang} comments:<=${githubMaxComments} created:>=${cutoffDate} sort:created-desc`,81 ];82
83 for (const query of queries) {84 if (totalSaved >= maxItems) break;85
86 const url = `https://api.github.com/search/issues?q=${encodeURIComponent(query)}&per_page=30`;87 log.info(`Searching ${lang}: ${query}`);88
89 const response = await fetch(url, { headers });90 if (!response.ok) {91 log.warning(`GitHub API status ${response.status} (rate limit). Waiting 3s...`);92 await sleep(3000);93 continue;94 }95
96 const data = await response.json();97 const issues = data.items || [];98
99 for (const issue of issues) {100 if (totalSaved >= maxItems) break;101 if (seenUrls.has(issue.html_url)) continue;102
103 const repoFullName = issue.repository_url.split('/repos/')[1] || '';104
105 // Skip mirror spam repos and bot-opened honeypots106 if (MIRROR_SPAM_REPOS.some((spam) => repoFullName.toLowerCase().includes(spam))) {107 continue;108 }109 if (excludeHoneypots && (isHoneypot(issue) || issue.user?.type === 'Bot')) {110 log.warning(`Blocked bot/honeypot issue: ${issue.html_url}`);111 continue;112 }113
114 // Cap at max 3 issues from the exact same repository so results stay diverse115 repoCounts[repoFullName] = (repoCounts[repoFullName] || 0) + 1;116 if (repoCounts[repoFullName] > 3) continue;117
118 const humanComments = Math.max(0, (issue.comments || 0) - 1);119 if (humanComments > maxComments) continue;120
121 const estimatedUsd = extractBountyUsd(issue);122 const labelNames = (issue.labels || []).map((l) => l.name);123 const hasDiamondLabel = labelNames.some((n) => n.includes('💎'));124 const bodyText = issue.body || '';125 const isEscrowVerified =126 hasDiamondLabel ||127 bodyText.includes('algora.io') ||128 bodyText.includes('opire.dev') ||129 query.includes('"algora.io"') ||130 query.includes('"opire.dev"');131
132 if (!estimatedUsd && !isEscrowVerified) continue;133 if (estimatedUsd && estimatedUsd < minBountyUsd) continue;134
135 seenUrls.add(issue.html_url);136
137 const bountyRecord = {138 title: issue.title,139 estimatedRewardUsd: estimatedUsd ?? minBountyUsd,140 language: lang,141 humanCommentsCount: humanComments,142 totalCommentsCount: issue.comments,143 repository: repoFullName,144 issueNumber: issue.number,145 issueUrl: issue.html_url,146 author: issue.user?.login,147 createdAt: issue.created_at,148 escrowVerified: isEscrowVerified,149 labels: labelNames,150 bodyPreview: bodyText.slice(0, 300).replace(/[^\x20-\x7E]/g, ' ').trim(),151 };152
153 const chargeResult = await Actor.pushData(bountyRecord);154 totalSaved++;155
156 if (chargeResult?.eventChargeLimitReached) {157 log.info('User maximum budget reached. Stopping run cleanly.');158 await Actor.exit();159 }160 }161
162 // Brief pause to respect GitHub unauthenticated rate limit (10 req/min)163 if (!githubToken) {164 await sleep(2000);165 }166 }167}168
169log.info(`Done! Extracted ${totalSaved} diverse, verified bounties.`);170await Actor.exit();name: CI
on: pull_request: push: branches: [main, master]
jobs: test: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - uses: actions/setup-node@v7 with: node-version: 24 cache: npm - run: npm ci - run: npm test