I wonder how soon Github will start force-updating repositories for 'important software supply chain elements' whose developers have walked away from Github because of their policies and no longer push changes, bug fixes, security updates and so on to GH. I have other thoughts, but they boil down to 'software supply chain security demands seem like they're going to kill your free ride, enjoy what happens next'. In re: https://mastodon.social/@njoseph@social.masto.host/111008214514033676