@hipsterelectron @aren @miss_rodent Actually I'm not sure if that helps anything or if you can still forge the payload anyway, knowing the symmetric key for the session. I'd have to think about it some more.
Post
So - leave github, let it die, dance on it's grave, go elsewhere.
And if elsewhere starts to get too crowded, or their policies seem weird, or the vibes are off, go elsewhere again. and again. Maybe make your own elsewhere, you can even invite people over, if you have the funding for it.
But take the opportunity to decentralize, to fragment, to get away from poisonous centralized infrastructure dependencies.
A Centralized archive - something like archive.org - is more useful;
Free software has an advantage there, as the licensing explicitly allows archiving.
I'd be fine with a centralized archive of mirrors for projects.
But, mirrors & archives are a distinct issue, from the infrastructure for creating and working on a project.
@miss_rodent archive dot org performs censorship and rejects any form of external accountability
@hipsterelectron Edited to remove the link; was not aware of them censoring things? I know they were legally required/compelled to remove a lot of stuff, but, hadn't heard anything about it beyond that.