Look at the repository’s metrics. Does it have stars, forks, and an active history of code commits spread across months or years? Fake repositories often have zero history and were created only days ago.