I will admit that while I think the idea of Vouch is nice, I'm not a huge fan. But that is not really an issue here, the issue is that this seems to be very exploitable. There's nothing to counteract someone creating a bunch of repos just to farm some score (this gets worse once you add in star farming).
For the same price, what is a reasonable score to auto-accept? If I make a small contribution to a large project, I'd automatically get a much larger score out of the gate, vs. if I contribute to a much smaller project. That would incentivize contributions to larger projects, and disincentivize contributing to smaller projects, that doesn't seem good for the ecosystem either.
I'm not sure why a more page-rank style system wasn't used. Effectively, rank users based on the diversity of the projects they're vouched in. That would avoid the problem of people being able to farm, and encourage contributions across the OS ecosystem.
I will admit that while I think the idea of Vouch is nice, I'm not a huge fan. But that is not really an issue here, the issue is that this seems to be very exploitable. There's nothing to counteract someone creating a bunch of repos just to farm some score (this gets worse once you add in star farming).
For the same price, what is a reasonable score to auto-accept? If I make a small contribution to a large project, I'd automatically get a much larger score out of the gate, vs. if I contribute to a much smaller project. That would incentivize contributions to larger projects, and disincentivize contributing to smaller projects, that doesn't seem good for the ecosystem either.
I'm not sure why a more page-rank style system wasn't used. Effectively, rank users based on the diversity of the projects they're vouched in. That would avoid the problem of people being able to farm, and encourage contributions across the OS ecosystem.
Love the idea of using page rank. Right now, there is so little adoption of vouch that I opted for the most basic thing.
Repo: https://github.com/rosslazer/vouch-book