Comment by exitb

When code is published on GitHub, GitHub itself is not bound by the public-facing license, but rather license grants the uploader aggress to as part of the terms of service. That points to the uploader as a responsible party.

In practice though, none of that is even remotely enforceable.