or simply going dark and releasing updates along with a public key to verify authenticity of the author making the contributions as a torrent and not on any gov

or simply going dark and releasing updates along with a public key to verify authenticity of the author making the contributions as a torrent and not on any governed site that can receive take down notices.