How to filter out vibe-coded dependencies

What’s the point? hasufell: > The best thing you can do is to clone the repo and check whether there are claude code commits or similar. If that would count for a black mark, people would scrub this signal and you end up with vibecoded deps anyway. OTOH merely having a bot in coauthors is not that strong of a signal. Some repos are 100% pure crystalline slop. The others may used it for bug triage. Those are not the same.