throwaway78246·4 anni fa·discussMy guess is that GitHub ignores issues so they don't have to pay out bug bounties.
throwaway78246·4 anni fa·discussIt was also my experience that it takes GitHub several months to fix issues and inform compromised users.