throwaway78246·4 jaar geleden·discussMy guess is that GitHub ignores issues so they don't have to pay out bug bounties.
throwaway78246·4 jaar geleden·discussIt was also my experience that it takes GitHub several months to fix issues and inform compromised users.