I like the idea but part of me worries that it’d just end up being the Hackoberfest nonsense again? Manual verification perhaps? Seems like a lot of work though…

To some degree that can be faked: https://github.com/artiebits/fake-git-history