Red flag checker

Probably the tool needs to be reworked to point out correct solutions to the potential risks it uncovers.

For eg single maintainer working on a project in their spare time, with a donation form => donate money, offer to pay for work on the project and or assign employees to contribute back.

That of course won't deter bad actors but it should make most uses of the tool result in positive outcomes.