It&#x27;s a bit worrying that GitHub will happily associate someone&#x27;s face on a commit that they didn&#x27;t write: <a href="https:&#x2F;&#x2F;github.com&#x2F;jayphelps&#x2F;git-blame-someone-else&#x2F;commit&#x2F;e5cfe4bb2190a2ae406d5f0b8f49c32ac0f01cd7" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jayphelps&#x2F;git-blame-someone-else&#x2F;commit&#x2F;e...</a><p>Perhaps GitHub should only do this for signed commits or commits to the author&#x27;s own repository or something.<p>GitHub also allows you to add anyone to a project without their consent (or has this changed?). This reminds me of the Facebook prank where someone added Mark Zuckerberg to a fake(?) pro-paedophile group.