Be verified beyond star counts
You can’t trust the stars on GitHub — I just learned that. Like on other social networks, stars can be bought on GitHub. This creates the misleading impression that a piece of software is especially popular and trustworthy. Unfortunately, this tactic appears to be frequently used to spread malware. The Rise of Fake GitHub Stars: A Growing Security Threat for cyberinsider.com ...