I don't really understand this argument: if GitHub allows hosting things that completely disclaim warranty and people are using things from GitHub, don't you effectively have this "tossing a blueprint into the world" problem? Sure, you aren't entitled to it, but there are plenty of places that offer this kind of service and plenty of consumers who get software from these services.

I was talking about the complaints that Github allows PRs.

I could easily self host my projects on a rpi and rate limit all the companies that download the same thing over and over every second. Companies can and should set up internal mirrors.

The advantage of github is that people have accounts and it's easy for them to send patches or discover projects.

But I'm fully capable of using git via email.

Is there a software repository that requires the developers to assume the liabilities?

The hosting costs are almost zero, and plenty of people are willing to do it for free. How is this supposed to change anything?