You can fake counts up but not down. I think it can make a decent measure of popularity where there’s disincentive to be popular (like pypi security). You can s

You can fake counts up but not down. I think it can make a decent measure of popularity where there’s disincentive to be popular (like pypi security). You can set a point where you’ll catch almost all the truly popular packages, plus a small portion of the non-popular. (Although, the ratio of true positive to false positive may be way off, that’s the nature of things with low prevalence).