GitHub tightens npm security with mandatory 2FA, access tokens

Fs-code – PyFilesystems for Gitlab, GitHub, and Git

Why is your open source project still hosted on GitHub?

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows