119
Anyone can Access Deleted and Private Repository Data on GitHub.
(trufflesecurity.com)
This is a most excellent place for technology news and articles.
It was purposefully designed that way so it’s not a bug. It’s just bad design. Like they say at the end of the article, people view private vs public as a security boundary. So it’s incredibly surprising and unintuitive behavior that has clearly resulted in security breaches.