report_registry.rs already checks has_user_reported() to prevent duplicate reports. However, there is no limit on the total number of unique reports a single user can make across all projects. A malicious user could file thousands of reports across the registry. A per-user report count limit should be enforced.
report_registry.rs already checks has_user_reported() to prevent duplicate reports. However, there is no limit on the total number of unique reports a single user can make across all projects. A malicious user could file thousands of reports across the registry. A per-user report count limit should be enforced.