New Research: A "Verified" GitHub Commit Is NOT Unique