Good faith question: what would you do with this information if you had it? For example, do you have a systematic audit plan for github accounts that you execute before using a project?