Even still, both repos had READMEs [1][2] clearly meant to be read by the public. The archival was only successful years ago, with a failed snapshot as far back as 2021 [3]. This really seems like they forgot it was ever public.

Now, this is only about it being a GitHub breach. Whether unlicensed (emenel/portfolio) or GPL (emenel/dust) code should be allowed in such datasets is a different matter.

[1] https://archive.softwareheritage.org/browse/origin/directory...

[2] https://archive.softwareheritage.org/browse/origin/directory...

[3] https://archive.softwareheritage.org/browse/origin/visits/?o...

I used SW Heritage to identify the repos that were used for training, since op did not post the repo names.

The “different source” is supposed to be ghactions.