Hold on a second, a download count combined with user ratings is pretty much how download.com works - as do most sites like that. If a plugin totally sucks and sends spam to your wp install or whatever, then it's not going to be included in the wp plugin directory to being with, right?