I assume you are referring to hacktoberfest. We did get a few good contributions from that but yeah it's dangerous if any contribution counts.

This got me thinking so I think those issues will need to be very well define - probably even with failing tests if possible. Also it's probably good to keep the number of bounty issues low for maintainability.

Seems there is still much to learn.