My comparison with GitHub was only referring to the problems of people not attributing themselves in their own repos/packages, later owners of a repo/package mi

My comparison with GitHub was only referring to the problems of people not attributing themselves in their own repos/packages, later owners of a repo/package misattributing later work to earlier owners of the repo/package, and random repos/packages you have nothing to do with claiming you're their author.