Unless we figure out how to evolve our processes – which includes being able to recognize and distinguish bot contributions – open-source maintenance is going to grind to a halt.

I wish there was some sort of "trust network" where actual humans can say, "Yes, I know this contributor IRL, and vouch for them." But that's also a security problem. So, 🤷🏼