How to filter out vibe-coded dependencies

Since people seem to already publish vibe coded projects to hackage I’m starting to wonder how I can make sure my dependency graph never includes such packages.

There’s no label on hackage and most READMEs have no disclaimers. The best thing you can do is to clone the repo and check whether there are claude code commits or similar.

Maybe it would be possible to maintain a remote cabal.project file that severs as a blacklist (through constraints). But that would have to be maintained manually.