We made 75 GitHub repos public on a timer and logged who came. The internet finds a public repo in 6 minutes, and without enterprise tools, you'd never know it flipped.
Of 128 YC-backed dev tools companies, 44 enable branch protection but only 2 block unchecked merges. The full leaderboard, the four rules, and the pattern that explains the gap.
The four rules behind our scan of 128 YC-backed dev tools companies: what each measures, how GitHub exposes the data, and where public-scan mode hits its limits.