Developer outlines strategies for surviving GitHub fragmentation: unified heatmaps across forges, username reservation, vouch-based trust chains, and mirror workflows to filter AI slop.
Key Takeaways
Mitchell Hashimoto’s vouch project appends approved/blocked contributors to a VOUCHED.td file via GitHub Actions, enabling repo-level trust lists.
Author built a Go script plus Hugo module to merge Forgejo and GitHub contribution data into a single public heatmap.
AI-generated PR volume is the core problem, not quality; maintainers face intractable review load even as individual AI PRs improve.
Mirroring self-hosted Forgejo repos to GitHub creates a manual PR migration step that acts as a CI hardening layer against pull_request_target abuse.
Grabbing consistent usernames on Codeberg, GitLab, and Bitbucket now matters if cross-platform vouch chains become the trust standard.
