GitHub is now also a CVE CNA and can issue its own CVE numbers for bugs disclosed in projects hosted on the platform. ... It will only work for PHP projects coded to work with Composer projects.

The PHP team has confirmed to BleepingComputer that they plan on eventually decommissioning their git server in the upcoming days and moving to GitHub permanently. Update 29-Mar-21 7:22 AM ET ...