throwaway78246·4 года назад·discussMy guess is that GitHub ignores issues so they don't have to pay out bug bounties.
throwaway78246·4 года назад·discussIt was also my experience that it takes GitHub several months to fix issues and inform compromised users.