> 1024 bit keys with recordings of not too old data can probably be found

I think GitHub might turn into a scary vector of supply chain attacks in the foreseeable future. There is a five digit number of users still running around with 1024 bit RSA keys.