I think it is worth continuing. Nail the trust model: dev signs a manifest, recs come from separate keys, no single key can dominate. A short “why I recommend this” note beats 5 star ratings for us at Masters of The Lair.