> but we can make it harder for cyber-criminals Why? Still throwing out the baby with the bathwater. Is there a huge number of problematic open source commits

> but we can make it harder for cyber-criminals Why? Still throwing out the baby with the bathwater. Is there a huge number of problematic open source commits by "cyber criminals"? Would this even stop them? Doubtful. Will this make it harder for bona fide people to contribute? Certainly.