alt Hacker NewsAI is actually beginning to encourage "restricted source", public-only-gets-binary debates to simply avoid such legal issues.
Write a snail-mail letter to get the real sources. Repositories are private with a small well-vetted list of contributors. Also avoid slop-PR headaches that away.
If you were licensing MIT, ostensibly it’s not the copying you care about, just the attribution. There is always the option to turn off prs, or even distribute code without using github.