We want to keep signal strong in the GitHub issue tracker – to make sure that it remains the best place to track bugs and features that affect development.
If you have a question on how to use GraphQL, please post it to Stack Overflow with the tag #graphql.
Please do not post general questions directly as GitHub issues. They may sit for weeks unanswered, or may be spontaneously closed without answer.
Before filing a new issue, make sure an issue for your problem doesn't already exist.
The best way to get a bug fixed is to provide a pull request with a simplified failing test case (or better yet, include a fix).
GraphQL.js is a reference implementation of the GraphQL specification. To discuss new features which are not GraphQL.js specific and fundamentally change the way GraphQL works, open an issue against the specification.
Facebook has a bounty program for the safe disclosure of security bugs. With that in mind, please do not file public issues; go through the process outlined on that page.