This problem has also plagued me.I saw a lot of people's responses.Some people rely on trusted bounty managers.Some people rely on surveys of projects.I think these are very important.We need to consider these issues comprehensively.