> Did you mean to write "the most [used] form"? Yeah. Too late to edit. I know that, but I postulate that people look at the author of the PR in githubs UI, n

> Did you mean to write "the most [used] form"? Yeah. Too late to edit. I know that, but I postulate that people look at the author of the PR in githubs UI, not individual commits. Even if they did, the verified badge only points to a github profile anyway. So.. an attacker would much rather want to impersonate a github profile than a commit. I guess.