How the Bulli Bai case exploits GitHub's features