Your points about provenance are valid, but regarding publishing, if you don't want contributions couldn't you maintain a -_private_ repo, and publish the asset

Your points about provenance are valid, but regarding publishing, if you don't want contributions couldn't you maintain a -_private_ repo, and publish the assets as a static website? I guess I don't understand the coupling of "how the 'source' assets are managed (in git)" with "how the assets are made available to the public".