• access control: that guy can only edit the Spanish translation and can't release
  • identity bridge: here's that guy's GitHub ID
  • name service or some other way to tell whether alice/project-name or bob/project-name is more legitimate (stars are not that way as they can trivially obtained in any quantities)