Github Stars and NPM downloads can't be a load-bearing credibility signal for security.
- Github Stars and NPM downloads can't be a load-bearing credibility signal for security.
- They're too cheap to buy, removing their signal of how safe and useful they are.