mpapis/gh_contributors — pull request #2 by envygeeks (2013-02-13 12:10:40+00:00)
Title: Parse instead of load.

JSON.load is unsafe parse. Even if we trust the source it comes from we "shouldn't trust the source" because it's not our server.