I applied this on my latest open source app, and I added two contributors, and so far it has worked fine!

However I only added them after the second or third pr, just to know if they are interested enough, and I always monitor the repository so if for some reason someone adds malicious code I will notice (and revert back).