Better : leave github for Codeberg.

How is this comment in any way relevant to the article or this discussion? Does Codeberg provide static analysis for CVE verification?