I came to know that they can be paid to give positive ratings. Which totally defeats the purpose. What we can do is check the community's opinion about the project, read their whitepaper, look up on the team.