The thread hasn't started.
The imports have.

The 3 Core Filters

1. Repository Maturity: Must be older than 90 days with at least 2 active human contributors.

2. Non-Author Imports: Package author self-imports and company corporate-owned showcases are excluded.

3. Non-Bot Diffs: Automated Dependabot and Renovate bump commits are filtered using author association and commit regex.

Verified Extraction Query

-- Mature Non-Author Dependency Infiltration
SELECT package_name, COUNT(DISTINCT repo_id) AS velocity_28d
FROM dependency_events de
JOIN repo_metadata rm ON de.repo_id = rm.id
WHERE rm.created_at < NOW() - INTERVAL '90 days'
  AND rm.contributors_count >= 2
  AND de.author NOT ILIKE '%[bot]%'
  AND de.commit_message NOT ILIKE 'bump%'
  AND de.commit_message NOT ILIKE 'chore(deps)%'
  AND de.committer_id != de.package_author_id
GROUP BY package_name
ORDER BY velocity_28d DESC;