the extent to which the github.com domain (and, to a similar extent, docker.com) is trusted blindly within software is troubling. anyone who controls github.com can own your machine. same for docker.com. why do you allow this?