Faking Git Till You Make It: Open Source Maintainers Beware of Reputation Farming
This post was prompted by a discussion on the Open Source Security Foundation (OpenSSF) Slack channel that was so interesting it warranted being posted to the SIREN mailing list. But this isn't your typical vulnerability or security advisory, but rather it's about a practice that seems…