I wrote about this a couple of years ago https://games.greggman.com/game/github-permission-problem/ https://games.greggman.com/game/github-permission-problem/

I wrote about this a couple of years ago https://games.greggman.com/game/github-permission-problem/ https://games.greggman.com/game/github-permission-problem/ Github has (had) some of the worst wording in the permission prompts as well as too many 3rd party apps asking for blanket permission to do anything and everything in all your repos. It might as well be "hey, give us root on your servers and our new service will do cool things for you!" And even worse is the 1000s and 1000s of repos that have signed up for those services including all kinds of popular libraries. They've given the keys to hack the libraries at will to 10s or 100s of random companies that integrate with github. It's insane.