2 ms·

No. Because accounts gain reputation. It's more likely they're able to pull off a supply chain attack from a known account then a new account. So, ban accounts

No. Because accounts gain reputation. It's more likely they're able to pull off a supply chain attack from a known account then a new account. So, ban accounts as you find them. Obvious.

mwint 4y ago
What’s “reputation” mean on GitHub? If it’s “valid looking commits to valid-looking repos”, it’s very trivial to fake that. You can fake the timestamps, too.
- iqkznnft 4y ago
  Account reputation means having contributed to projects with reputation.