> like github repos that don't seem relevant i wouldn't necessarily trust a repo that does seem relevant either. it's trivial to put any data you want at a url

> like github repos that don't seem relevant i wouldn't necessarily trust a repo that does seem relevant either. it's trivial to put any data you want at a url which, at a glance, appears to legitimately belong to any repo you can fork.