> meaning how to verify genuine authors and genuine repos, and block fake authors and fake repos? Signed commits maybe… In my opinion, you’re thinking about t

> meaning how to verify genuine authors and genuine repos, and block fake authors and fake repos? Signed commits maybe… In my opinion, you’re thinking about this wrong. GitHub is the same as any other online platform… It doesn’t matter “who you say you are”, it’s the reputation that people trust (follows, stars etc…)… and reputation cannot be faked (very easily)