I can use myself as an anecdotal example. I use GitHub mainly to store guides and neat tricks for myself, and to sometimes share some excellent code. All my current professional work lives in Azure DevOps, locked away so that you would never know so if I didn’t tell you. I have a NPM package that should be private but is public because we share it with some contractors and nonsense occurred (loooong story that is basically answered by “above my pay grade”). If you found it and looked at my GitHub profile, then you might use it, and you’d experience some breaking changes that you typically wouldn’t with good OSS NPM packages every time we make some major updates to it. Because we don’t really factor external user into our processes.