From my perspective "slopcode/vibecode" means entirely (or mostly) generated, which is different than a human-maintained project that includes bits of generated code. As a rule I'm very skeptical of the former and give the benefit of the doubt to the latter especially if it's an established project.
I'd be fine with removal or mandatory disclosure, but the latter would probably be easier to implement if there was a way to filter them out.