Publishing source as client-side JS when millions are out there looking to rip you off at every turn is a losing proposition. And I think you know it.

Shifting blame to GitHub is absolutely idiotic.

Try removing locks from your doors in a high crime area (which is what the Internet is) then being indignant when the police can't stop all the criminals stealing your property.