The Linux Foundation's executive director has proposed developing a decentralized trust system to help users assess the trustworthiness of open-source projects based on factors like contributor verification and project history.

ZDNET

trust scorecard

How do you tell the difference between trustworthy open-source developers and hackers? Here's one idea.