The Reality of GitHub's Fake Star Economy

StarScout analysis identified about 6 million suspected fake stars spread across 18,617 repositories and about 301,000 accounts on GitHub between 2019 and 2024.

Fake star campaigns surged in 2024, with 16.66% of repositories with 50+ stars found to be involved. Among detected campaigns, 78 repositories also appeared on GitHub Trending, showing that purchased stars were actually used to game discovery algorithms.

Pricing varied by account quality and delivery method.

• Low tier: $0.03–$0.10 per star
• Mid tier: $0.20–$0.50
• Premium tier: $0.80–$0.90

An ecosystem has formed spanning Fiverr, dedicated websites, exchange networks, and private channels, complete with contribution graph manipulation tools, sales of pre-made GitHub profiles, replacement guarantees, and purchase APIs.

The core problem is that GitHub stars are used as a fundraising signal. According to Redpoint Ventures analysis, the median for developer tool companies was 2,850 stars at Seed and 4,980 at Series A. These numbers effectively become star-buying targets, and the math shows Seed-level thresholds can be approached for just a few hundred dollars worth of cheap stars.

In the article's own sampling, star-to-fork ratio and star-to-watcher ratio were presented as the strongest manipulation signals. Healthy projects typically show 100–200 forks per 1,000 stars, while suspicious projects showed this ratio at much lower levels.

Examples cited include FreeDomain (157,000 stars, 168 watchers), Union Labs (ranked #1 on the ROSS Index but flagged by StarScout with 47.4% suspected fake stars), and openai-fm (66% suspicious accounts, 36% ghost accounts).

GitHub policy prohibits inauthentic activity and compensated stars, but enforcement is asymmetric, with account crackdowns lagging behind repository takedowns. CMU researchers proposed structural alternatives such as a network-centrality-based weighted popularity metric in place of raw star counts.

In conclusion, the article argues that GitHub stars are no longer a simple popularity metric, but have become part of a self-reinforcing loop of VC tracking, startup manipulation, inflated traction, and bigger investments.