4 ms·

That's information disclosure; nothing about the repo after it's privated should be known, including name changes and deletion.

• jedberg 5y ago
  It’s unclear to me what the attack vector is for that disclosure.
• loa_in_ 5y ago
  It was known and there are many sites scraping GH for metadata that will have it anyway
  • judge2020 5y ago
    Not whether or not a repo exists after it's set private.
    • loa_in_ 5y ago
      This information is useless. It leaks nothing but name and existence of something once public (that vanished from public view). Most importantly it's not confidential or critical in any way