Why don't browsers use history or Alexa rank to highlight trustworthy sites? Gmail already warns me if I haven't emailed a person/domain before.
This seems like a viable heuristic against phishing sites.
Docker Hub has this lovely feature where *they* provide builds of Dockerfiles. For example: https://hub.docker.com/r/etsy/hound/
This is great for making software more trustworthy. I can review the code on GitHub and be confident that I'm running the same code. More platforms should do this.