How to filter out vibe-coded dependencies

Without any bot protection mechanisms the rating system could be subverted. An example would be a bad actor wanting to replace ms-azure-api with a malicious API where they downrate the good library and uprate their malicious library.