Hey Product Hunt! I built OSS Protector after watching OSS maintainer friends drown in bounty-farming, AI-spam, and low-effort duplicate PRs. The pattern is always the same — a small number of bad actors target dozens of repos at once, and every maintainer has to figure them out alone. OSS Protector is one shared GitHub App + a public directory. Install it on your repos, and every PR gets scored against signals from every other installed repo: abuse blocklists, lifecycle-script execution, obfuscation, malicious workflows, cross-repo bounty campaigns. Strong evidence posts a PR assessment; weaker signals stay in a review queue you can correct from PR comments (@oss-protector dismiss / confirm / allow / reset). It's free, MIT-licensed, runs on Cloudflare Workers + D1. Source: github.com/lord007tn/oss-protector Would love your feedback — especially edge cases where this would help or get in your way.

OSS Protector

Shared abuse intelligence for GitHub maintainers

Shared abuse intelligence for GitHub maintainers