Good faith question: what would you do with this information if you had it? For example, do you have a systematic audit plan for github accounts that you execut

Good faith question: what would you do with this information if you had it? For example, do you have a systematic audit plan for github accounts that you execute before using a project?