Content blocking only does so much, as evidenced by the existence of tools specifically designed for its circumvention, and presumably effective at same.

And of course it's up to the website owner whose content they host. They don't have to take down those repositories. But, unless the DDoS stops, they have to choose between taking down those repos and continuing to stand the gaff.