Actually, when we buy lab equipment from the US we have to fill out paperwork saying that it will not be used to produce weapons, and that it will not be resold

Actually, when we buy lab equipment from the US we have to fill out paperwork saying that it will not be used to produce weapons, and that it will not be resold to "bad" countries. Probably there is some precedent by considering e.g. if Lockheed or FedEx is the exporting company if there have been cases where weapons got exported to unwanted actors. Probably github is like FedEx in these cases.