3 ms·
I think blocking the PR author instead of the original project is a good move. Adding more manual labor to maintainers, not so much. I don’t have an alternativ
by villasv 5y ago
I think blocking the PR author instead of the original project is a good move. Adding more manual labor to maintainers, not so much.
I don’t have an alternative solution, though. I wish it would at least pass through PRs opened from GitHub citizens with some form of reputation.
- miohtama 5y agoAfter Github has enough data, it can automatically identify malicious contributors. Facebook, Twitter, already do this for spam. But you are still going to need manual reports to get data.