throwaway78246·4 years ago·discussMy guess is that GitHub ignores issues so they don't have to pay out bug bounties.
throwaway78246·4 years ago·discussIt was also my experience that it takes GitHub several months to fix issues and inform compromised users.