Isn't the person owning the repo responsible? We rely on them and partly on Github (as they would remove the code if they receive a legal complaint).