Not sensitive for you. But GitHub has started to look at supply chain attacks. So I'm popular module which isn't very sensitive is used biological projects that are. The account that maintains the module is exploited and that causes lots of havoc
Yeah exactly, this is what I mean. I still haven't figured out how to set that up so I have to paste the key in from my password manager every time I want to push. I hate when they paternalisticly decide what ought to be best for me