I urge FOSS maintainers and entities giving grants to do better due diligence when onboarding brand new devs and giving grants. People are faking GitHub activity, portfolios, and entire projects. It's still easy to spot if you take the time instead of just throwing money.

FOSS is easier target than a company, because in a desperation to have contributors, barriers of entry are lower, but it has long-term consequences to the project, so be aware!