Comment by cloudhead

Here's the problem: how do you know that the commit signers are the current maintainers of the repo?