I think it misses taking ban status into a account. AI bots that merge stuff into their own repos get a good track record and can probably fool this system, but when maintainers start to block them that should gradually become a rather strong signal it being a bad egg.
@bagder any sort of mechanism won't work on github because capital is the primary interest and you fight against it. First seize the means of production.