heh, with some clever social engineering and timing this could actually become a new form of attack. A lot of scripts (and Gemfiles and other things) point dire

heh, with some clever social engineering and timing this could actually become a new form of attack. A lot of scripts (and Gemfiles and other things) point directly to projects on Github. Imagine an attacker managing to sneak a subtle offensive thing into a PR and get it merged in, then later complain to Github at a time when the repo owner is busy/unresponsive/on holiday. Then all the scripts or Gemfiles trying to pull down the repo fail.