Consider as well the current spotlight on FOSS provenance tracking since log4j. Allowing anonymous contributions/approvals into anything 'customer-facing' seems contraindicated.
-- Ken Coar (📱) Software developer, author, opinionist Sanagendamgagwedweinini