Important open source projects should not use GitHub (2020)

What I haven't seen in this post is the description of _real threat_, which comes from M$ owning GitHub.

By no means I would call them "good", but what they can do?

Delete your repo? Firstly, why would they do that? Secondly, just a backup.

>Selfhost your repo, that's not that hard.

Maybe this was true a few years ago (spoiler: no), but now, in the era of AI, shitstorm it became extremely hard.

Crawlers will constantly DDoS your servers and AI-powered not will continuously try to register to your platform.

See, for example, this: https://outage.sr.ht/ or this: https://drewdevault.com/2025/03/17/2025-03-17-Stop-externali...

Surely, it may be a bad idea, to be _reliant_ on GitHub entirely, but in the world, where supporting your own infrastructure is so expensive and time-consuming I think, that GitHub is a acceptable option.

Well due to events in the US, I think governments at the very least should be very careful with having projects be reliant on Github, given that US has and can decide to lock off your country.

When they are in a position of power, they can also gatekeep access to other people's repositories, not just your own.

"Organic Maps migrates to Forgejo due to GitHub account blocked by Microsoft" - https://news.ycombinator.com/item?id=43525395

"probably some contributor was geolocated in a sanctioned region" - https://mastodon.social/@organicmaps/114155428924741370