An advantage of github is that its social network type features give you ways to make more educated guesses about whether a project is legitimate vs a malware trap. It’s great that it is not difficult to find alternative hosting for git repos to evade Microsoft’s censorship, but I don’t think there exists an ideal alternative solution for trust infrastructure, which is extra important for anything piracy related.