OSS Protector
Flags AI-generated spam pull requests before they hit a maintainer's review queue.
OSS Protector is a free GitHub App that scores incoming PRs on account age, diff signature and cross-repo overlap, then posts a public, auditable confidence breakdown for every flag. It's community-run and free forever, with the detection weights open on GitHub for anyone to check. Coverage is still early: 348 flagged accounts tracked, live in 1 protected repo so far.
What holds up
- +Every flag shows its six weighted signals — you can audit the reasoning on GitHub, not a black box.
- +Free forever, no tiers — no paywall between you and the spam filter.
- +Built by maintainers reviewing the same noise, not a third-party vendor.
Mind the limits
- −Live in just 1 protected repo so far — the numbers are early, not proven at scale.
- −Flags are weighted confidence scores, not certainties — false positives are possible.
Featured here? Take the badge
Put it on your site — it links back to this review. Free for every listed product, always.
<a href="https://stillworks.dev/products/p/oss-protector/"><img src="https://stillworks.dev/badge/oss-protector.svg" alt="Picked by StillWorks" width="250" height="54"></a>