Using GitHub securely is a lot of work https://astral.sh/blog/open-source-security-at-astral