We thought long and hard about how people could game the system but ultimately it will be quite difficult because you still have to convince a large number of developers to actually use and depend on your project. And since the flow of donations and dependencies is public, the community will not look kindly one individuals trying such tactics.