We\'re using Redmine & SVN to manage a community project with lots of small code submissions. Starting to run into the problem of losing track of who coded what part, as
Congratulations, an excellent problem to have. :)
The Linux kernel community has adopted a Signed-off-by: line in all patches intending to be integrated into the kernel. (There is even a command line option for git for adding the line when importing an mbox full of patches; something similar for you might be just the ticket.)