How GitHub maintains compliance for open source dependencies — PLINKFEED