What project has all that? A lot of stuff is just:
Make a GitHub pull request
Fix whatever the project owner doesn't like in said PR
Done
GitHub makes FOSS no longer stone age.
Make a GitHub pull request
Fix whatever the project owner doesn't like in said PR
Done
GitHub makes FOSS no longer stone age.
Until GH or Microsoft does dislikes the project and kills it, with all the PRs, bug reports, etc.
Email makes things safer.
It also doesn't handle sensitive data(It's all public!) and it can't really change stuff easily without messing up the hashes and making it quickly noticeable. Although I suppose on a large project it could slip in commits nobody would notice.
Even the actions bot is open source!