Comment by gfody

I guess it's somewhat known that you can trivially fake a repo w/a fork like this but it still feels like a bigger security risk than the "this commit comes from another repository" banner gives it credit for:

https://github.com/cline/cline/commit/b181e0