India's GitHub Repos Exposed: 35 Popular Sites' Security Flaws Revealed

The 2026 pricing changes got me curious how the projects I actually use run their CI. So I scanned 35 well-known open-source repos (vite, next.js, prisma, astro, eslint, the usual suspects) and pulled their public GitHub Actions data: recent runs, config patterns, failure rates. A few things genuine