We made a small change compared to last year in those criteria. We found that quite a few well-known single-maintainer projects that someone wanted to nominate had no Code of Conduct (CoC), while larger projects almost always did have a CoC. Single-maintainer projects that are critical dependencies for larger projects or a whole ecosystem are quite important (xref this XKCD comic) and we wanted to make sure they weren't excluded from consideration - hence we loosened our "must have a CoC" requirement a little.