frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

GitHub's Fake Star Economy

https://awesomeagents.ai/news/github-fake-stars-investigation/
68•Liriel•1h ago

Comments

talsania•50m ago
Seen this firsthand, repos with hundreds of stars and zero meaningful commits or issues. In hardware/RTL projects it's less prominent.
dafi70•43m ago
Honest question: how can VCs consider the 'star' system reliable? Users who add stars often stop following the project, so poorly maintained projects can have many stars but are effectively outdated. A better system, but certainly not the best, would be to look at how much "life" issues have, opening, closing (not automatic), and response times. My project has 200 stars, and I struggle like crazy to update regularly without simple version bumps.
askl•38m ago
Stars are a simple metric even someone like a VC investor can understand. Your "better system" sounds far too complicated and time consuming.
HighlandSpring•37m ago
I wonder if there's a more graph oriented score that could work well here - something pagerank ish so that a repo scores better if it has issues reported by users who themselves have a good score. So it's at least a little resilient to crude manipulation attempts
3form•29m ago
It would be more resilient indeed, I think. Definitely needs a way to figure out which users should have a good score, though - otherwise it's just shifting the problem somewhat. Perhaps it could be done with a reputation type of approach, where the initial reputation would be driven by a pool of "trusted" open source contributors from some major projects.

That said, I believe the core problem is that GitHub belongs to Microsoft, and so it will still go more towards operating like a social network than not - i.e. engagement matters. It will still take a good will to get rid of Social Network Disease at scale.

3form•34m ago
The stars have fallen to the classic problem of becoming a goal and stopping being a good metric. This can apply to your measure just as well: issues can also be gamed to be opened, closed and responded to quickly, especially now with LLMs.
test1235•30m ago
"When a measure becomes a target, it ceases to be a good measure"

https://en.wikipedia.org/wiki/Goodhart%27s_law

sunrunner•23m ago
Was it ever a good metric? A star from another account costs nothing and conveys nothing about the sincerity, knowledge, importance or cultural weight of the star giver. As a signal it's as weak as 'hitting that like button'.

If the number of stars are in the thousands, tens of thousands, or hundreds of thousands, that might correlate with a serious project. But that should be visible by real, costly activity such as issues, PRs, discussion and activity.

3form•18m ago
There isn't just "good metric" in vacuum - it was a good metric of exactly the popularity that you mentioned. But stars becoming an object of desire is what killed it for that purpose. Perhaps now they are a "good metric" of combined interest and investment in the project, but what they're measuring is just not useful anymore.
sunrunner•12m ago
Yeah, I'd agree with this. I always thought of a star indicating only that a person (or account, generally) had an active interest in another project, either through being directly related or just from curiosity. Which can sort of work as a proxy for interesting, important or active, but not accurately.
einpoklum•9m ago
A repository with zero stars has essentially no users. A repository with single-stars has a few users, but possibly most/all are personal acquiantances of the author, or members of the project.

It is the meaning of having dozens or hundreds of stars that is undermined by the practice described at the linked post.

noosphr•6m ago
There was a time when total number of hyperlinks to a site was an amazing metric measuring its quality.
faangguyindia•32m ago
because VC don't care about anything being legitimate, if it can fool VCs it can also fool market participants, then VC can profit off of it.

one VC told me, you'll get more funding and upvotes if u don't put "india" in your username.

foresterre•26m ago
With the advent of AI, these "life" events are probably even simpler to fake than AI though, and unlike the faking of stars not against the ToS.
Se_ba•26m ago
This is a good idea, but from my experience most VCs (I’m not talking about the big leagues) aren’t technical, they tend to repeat buzzwords, so they don’t really understand how star systems works.
logicallee•16m ago
>Honest question: how can VCs consider the 'star' system reliable?

Founders need the ability to get traction, so if a VC gets a pitch and the project's repo has 0 stars, that's a strong signal that this specific team is just not able to put themselves out there, or that what they're making doesn't resonate with anyone.

When I mentioned that a small feature I shared got 3k views when I just mentioned it on Reddit, then investors' ears perked right up and I bet you're thinking "I wonder what that is, I'd like to see that!" People like to see things that are popular.

By the way, congrats on 200 stars on your project, I think that is definitely a solid indicator of interest and quality, and I doubt investors would ignore it.

Topfi•40m ago
I don't know what is more, for lack of a better word, pathetic, buying stars/upvotes/platform equivalent or thinking of oneself as a serious investor and using something like that as a metric guiding your decision making process.

I'd give a lot of credit to Microsoft and the Github team if they went on a major ban/star removal wave of affected repos, akin to how Valve occasionally does a major sweep across CSGO2 banning verified cheaters.

Miraltar•28m ago
Citing Valve as a model for handling cheating is not what I'd have reached for.
Topfi•16m ago
Honest question, which companies handle the process better given it is a trade-off? Yes, VAC is not as iron-clad as kernel level solutions can be, but the latter is overly invasive for many users. I'd argue neither is the objectively right or better approach here and Valves approach of longer term data collection and working on ML solutions that have the potential to catch even those cheating methods currently able to bypass kernel level anti-cheat is a good step.

On Github stars, I'd argue they are the most suitable comparison, as all the funny business regarding stars should be, if at all, detectable by Github directly and ideally, bans would have the biggest deterrent effect, if they happened in larger waves, allowing the community to see who did engage in fraudulent behaviour.

luke5441•21m ago
The problem is that if this is the game now, you need to play it. I'm trying to get a new open source project off the ground and now I wonder if I need to buy fake stars. Or buy the cheapest kind of fake stars for my competitors so they get deleted.

For Microsoft this is another kind of sunk cost, so idk how much incentive they have to fix this situation.

superdisk•18m ago
An open source project really shouldn't be something you need to "get off the ground." If it provides value then people will naturally use it.
mariusor•10m ago
Haha, have you tried that? I think in this day and age marketing is much needed activity even for open-source projects providing quality solutions to problems.
luke5441•6m ago
How do people know it exists to solve their problem? Even before LLMs it was hard to get through VC funded marketing by (commercial) competitors.

My first Open Source project easily got off the ground just by being listed in SourceForge.

Topfi•9m ago
The issue with that is, it's a game that never ends. Now you need to inflate your npm/brew/dnf installs, then your website traffic to not make it to obvious, etc.

I am not successful at all with my current projects (admittedly am not trying to be nowadays), so feel free to dismiss this advice that predates a time before LLM driven development, but in the past, I have had decent success in forums interacting with those with a specific problem my project did address. Less in stars, more in actual exchange of helpful contributions.

Lapel2742•39m ago
I do not look at the stars. I look at the list of contributors, their activities and the bug reports / issues.
est•35m ago
> I look at the list of contributors

Specifically if those avatars are cute animie girls.

tomaytotomato•13m ago
> Specifically if those avatars are cute anime girls.

I know you are half joking/not joking, but this is definitely a golden signal.

mrweasel•5m ago
Yeah, I didn't think anyone would place any actual value on the stars. It almost doesn't need to be a feature, because what is it suppose to do exactly?
apples_oranges•27m ago
I look at the starts when choosing dependencies, it's a first filter for sure. Good reminder that everything gets gamed given the incentives.
moffkalast•23m ago
Average case of "once a measure becomes a target".
msdz•16m ago
> I look at the starts when choosing dependencies, it's a first filter for sure.

Unfortunately I still look at them, too, out of habit: The project or repo's star count _was_ a first filter in the past, and we must keep in mind it no longer is.

> Good reminder that everything gets gamed given the incentives.

Also known as Goodhart's law [1]: "When a measure becomes a target, it ceases to be a good measure".

Essentially, VCs screwed this one up for the rest of us, I think?

[1] https://en.wikipedia.org/wiki/Goodhart%27s_law

lkm0•26m ago
We're this close to rediscovering pagerank
AKSF_Ackermann•25m ago
So, if star to fork ratio is the new signal, time to make an extra fake star tier, where the bot forks the repo, generates a commit with the cheapest LLM available and pushes that to gh, right?
anant-singhal•15m ago
Seen this happen first-hand with mid-to-large open source projects that sometimes "sponsor" hackathons, literally setting a task to "star the repo" to be eligible.

It’s supposed to get people to actually try your product. If they like it, they star it. Simple.

At that point, forcing the action just inflates numbers and strips them of any meaning.

Gaming stars to set it as a positive signal for the product to showcase is just SHIT.

elashri•12m ago
I usually use stars as a bookmark list to visit later (which I rarely do). I probably would need to stop doing that and use my self-hosted "Karkeep" instance for github projects as well.
QuantumNomad_•7m ago
Never heard of it before.

https://github.com/karakeep-app/karakeep

Sounds useful.

I’ll star it and check it out later ;)

nryoo•9m ago
The real metric is: does it solve my problem, and is the maintainer still responding to issues? Everything else is just noise.
aledevv•8m ago
> VCs explicitly use stars as sourcing signals

In my opinion, nothing could be more wrong. GitHub's own ratings are easily manipulated and measure not necessarily the quality of the project itself, but rather its Popularity. The problem is that popularity is rarely directly proportional to the quality of the project itself.

I'm building a product and I'm seeing what important is the distribution and comunication instead of the development it self.

Unfortunately, a project's popularity is often directly proportional to the communication "built" around it and inversely proportional to its actual quality. This isn't always the case, but it often is.

Moreover, adopting effective and objective project evaluation tools is quite expensive for VCs.

nottorp•7m ago
Why is zero public repos a criteria?

I paid github for years to keep my repos private...

But then I don't participate in the stars "economy" anyway, I don't star and I don't count stars, so I'm probably irrellevant for this study.

Topfi•3m ago
Am very much the same, took a bunch private two years ago for multitude of reasons. I can, however, see why no public repos could be a partial indicator and of concern, in conjunction with sudden star growth, simply because it is hard for a person with no prior project to suddenly and publicly strike gold. Even on Youtube it is a rare treat to stumble across a well made video by a small channel and without algos to surface repos on Github in the same way, any viral success from a previously inactive account should be treated with some suspicion.
Oras•6m ago
Would be nice to see the ratio of OpenClaw stars

The first open-weights Large Transaction Model, EWE-1

https://sistemalabs.com/blog/introducing-ewe-1
1•0xideas•3m ago•0 comments

What Makes Docs Beautiful?

https://passo.uno/what-makes-docs-beautiful/
1•theletterf•3m ago•0 comments

How I made a budget tracker for my gf because she kept complaining about Sheets

https://edm115.dev/blog/2026/02/15/how-i-made-spendly/
1•EDM115•5m ago•0 comments

Show HN: MyKana, a Japanese learning app I built for my own study

https://mykana.app/
1•zerratar•8m ago•0 comments

ACM CCS 2026 Between-Cycle Transparency Report

https://github.com/ACM-CCS-2026/Transparency-Report
1•jruohonen•10m ago•0 comments

Bun v1.3.13

https://bun.com/blog/bun-v1.3.13
1•Erenay09•14m ago•0 comments

ShannonBase is database agent platform

https://medium.com/@shannon.data.tech/shannonbase-is-databas-agent-platform-2e914ccfc45e
1•shannon-data-ai•20m ago•1 comments

Architecture is all you need (How to think about agentic design)

https://x.com/compose/articles/edit/2046045421844455424
1•Kushal6070•21m ago•0 comments

Kindle E-Readers Released in 2012 or Earlier

https://www.amazon.com/gp/help/customer/display.html?nodeId=TRXsYxKJr4WTdsVs2P
1•bandwitch•23m ago•1 comments

The AI-Ready Product Data Framework for B2B Commerce

https://virtocommerce.com/assets/ai-ready-pim-framework
2•lizzieyo•23m ago•0 comments

How (and why) we rewrote our production C++ front end infrastructure in Rust

https://blog.nearlyfreespeech.net/2026/04/17/how-and-why-we-rewrote-our-production-c-frontend-inf...
1•birdculture•23m ago•0 comments

Show HN: Busybee - a FIFO build queue for multi-agent dev workflows

https://github.com/githappens/busybee
1•playfultones•24m ago•1 comments

WhatsApp Plus is rolling out new premium features

https://wabetainfo.com/whatsapp-plus-is-rolling-out-new-premium-features/
1•fwn•25m ago•0 comments

DuckDB Now Speaks Dutch

https://duckdb.org/2026/04/01/duckdb-now-speaks-dutch
1•saeedesmaili•27m ago•0 comments

Understanding the Go Runtime: The Network Poller

https://internals-for-interns.com/posts/go-netpoller/
1•valyala•28m ago•0 comments

Salesforce Stopped Paying for Salesforcefoundation.org

1•october8140•28m ago•1 comments

Smartphones, Online Music Streaming, and Traffic Fatalities

https://www.nber.org/papers/w34866
1•nixass•33m ago•0 comments

Controlling the secondary fan on Minisforum AI Pro HX 370

https://github.com/MiniPcThinker/minisforum_ai_pro_hx_370_aux_fan_controller/blob/main/INVESTIGAT...
1•minipcthinker•33m ago•0 comments

Prediction Markets: Last Week Tonight with John Oliver [video]

https://www.youtube.com/watch?v=ZN4njIQcSR4
3•Topfi•43m ago•0 comments

File System Wars

https://bytearchitect.io/macos-security/theory/Filesystem-Wars-Why-Your-Choice-of-Storage-is-Actu...
1•rantingdemon•44m ago•0 comments

Email Newsletter Management

https://gemvoyage.net/
1•princesauro•44m ago•0 comments

Bloomberg Terminal is ugly and clunky, but everyone uses it. Even their enemies

https://twitter.com/mb_ghalibaf/status/2045986841220772123
1•haebom•45m ago•0 comments

Neuro-Symbolic Ode Discovery with Latent Grammar Flow

https://arxiv.org/abs/2604.16232
1•ahsillyme•47m ago•0 comments

ZeusHammer – Built an AI Agent That "Thinks Locally"

https://github.com/pengrambo3-tech/ZeusHammer
1•RamboZeusHammer•48m ago•0 comments

New Debian Project Leader Elected for 2026

https://www.phoronix.com/news/Debian-DPL-Sruthi-Chandran
2•axbyte•50m ago•0 comments

Dentavive Legit or Scam in 2026? ( Hype or Trusted Choice?) [pdf]

https://fsc.org/sites/default/files/webform/problem_with_unacceptable_activi/_sid_/Dentavive1Guid...
1•hauzlapy•51m ago•0 comments

Show HN: I Recreated Encarta's MindMaze

https://medium.com/@laurentiu.raducu/i-recreated-encartas-mindmaze-and-added-it-to-select-supply-...
6•laurentiurad•51m ago•3 comments

Show HN: Keshro, plan and execute migrations with AI agents

https://keshro.com
1•jlewitt1•56m ago•1 comments

People and AI

https://insurtechamsterdam.com/blog/ai-people-strategy-insurance
1•Venesha•56m ago•0 comments

Authorship and Involuntary Attribution

https://www.prio.org/comments/1156
1•jruohonen•56m ago•0 comments