So like an attribution manifest that contains direct contributions and links to other OSS manifests? Then you could just have a project walk the manifests and generate an output of everyone who contributed?