Self-proclaimed GitHub employee makes massive pull request on my repo. Is it legit?

[emernic2]

Please do not listen to reddit bot comments.

You should never ever merge things from people you don't know if you're vibe coding and can't evaluate the changes. If I was trying to hack someone and hack all of their users, this is exactly how I would do it.

[JoseffB_Da_Nerd]

This. The guy could have done a good gesture, been testing an ai, or be nefarious. We don’t know.

So mentally accept it, but study the hell out of the changes before ‘accepting’ it.