This sounds solvable with some kind of painful to write and test heuristic tool. Something like "find other repos with similar product names and similar code b

This sounds solvable with some kind of painful to write and test heuristic tool. Something like "find other repos with similar product names and similar code but no forking audit trail" ... If you do an automated code diff and find it's involving say, posting stuff to a server, you can become suspicious. All these signals can become rather shallow with the right tooling centralizing this would make it a bit more efficient because you can just cache things and respond fairly immediately