Re:We lost 54k GitHub stars
by judge2020 on Thursday April 14, 2022 @10:04PM
(#31035923)
That's information disclosure; nothing about the repo after it's privated should be known, including name changes and deletion.
[ Parent
| on HN ]
Itβs unclear to me what the attack vector is for that disclosure.
It was known and there are many sites scraping GH for metadata that will have it anyway
Not whether or not a repo exists after it's set private.