https://rud.is/b/2017/09/15/its-a-fake-%f0%9f%93%a6-revisiting-trust-in-foss-ecosystems/