> No, it's more like somebody sending to your lab, uninvited, an impersonal inspection bot with another company's branding on it, which doesn't only disclose potential issues to you but advertises them across the whole cyberspace.
GitHub isn't your lab. It's Microsoft's lab. (They just rent out space free of charge.)