3 ms·

I think it is yet another reason (potentially malicious contributors are another) that open source projects are going to have to verify contributors.