What an absolute joke that it has taken GitHub this long to clean up it's act when it comes to supply chain security.