This checklist is a petty distraction from the most pertinent truth; it's all about trust. Reputable people and companies don't trust your project because neither you nor your project have connections to famous people or companies. Big companies don't trust projects that aren't used by other big companies. Especially open source projects; this is because companies don't trust someone who works for free and has no skin in the game (nothing to lose). Small companies and individual developers also tend not to trust projects that aren't already used by big companies so it's a catch 22 from any angle. Trust in open source is about money; you need connections to big capital. Everyone follows capital like moths to a flame. You can have the worst product in the world, but if you have connections to big corporate capital, you will succeed.

That's what I learned from my own open source work; without meaningful social connections, it took me about 10 years working nights and weekends to get one of my projects to reach 200K+ downloads per month. I have about 4 full years of 'failed' projects behind me; even though they were actually successful from a technical perspective.