@dalias @Codeberg Yeah, agreed. Reputation systems or even basic social graph adjacency checks (“Have these users interacted before? Have both of these users interacted with the same repositories before? Do these users have overlapping organization memberships?”, etc.) have performance costs, and can be tricky to balance, but are well worth it. Would actually be a really neat case study to show how to add that sort of protection to an existing code base.