Analyze open-source repositories offering bounties to detect red flags, honeypot patterns, and non-paying bounty farms.
With the rise of autonomous coding agents and open-source bounties, rogue repository owners are creating fake bounty issues to farm free PRs and code solutions without payout mechanisms. Common red flags include zero merged PRs despite high activity, newly created accounts, and off-platform reward promises.