Trying to frame this as a security problem is a stretch, IMO. My impression is that most public projects on GitHub are only of interest to the author, and mayb

Trying to frame this as a security problem is a stretch, IMO. My impression is that most public projects on GitHub are only of interest to the author, and maybe a small handful of people. I, for example, have over 100 non-forked public repos and, except for 3 or 4 projects, nobody even looks at most of them, much less clones them and uses them. Even the ~4 that do get attention, it's usually not because they're using the code itself - it's because they're doing something similar and want to see how I did it. On the other hand, I only have anecdotal evidence to back up that claim, so who knows.