Sounds scary, if you didn't deep dive into how git works and how GitHub hosts it.
TL;DR: If some repo can
git fetch upstream - all these fetchable commits will be always accessible from this fork/main repo.Only after the visibility of the repo changes - new commits will be not discoverable.
For more details and examples, check this article, which was brought to us from CatOps Chat.
#security #git #github
