title: Malware Prevention on Bitbucket/GitHub
body: <p>I have googled and searched on stack overflow but have found no clear answer to this. What steps do sites like github and bitbucket take to ensure that public repositories are safe and free of malware? It has only just occurred to me how blindly I will follow online tutorials/guides and run git clone commands from sources I do not know or understand. </p>
  
  <p>Is there reason to think this is a safe process?
  Have I been ignorant at best and recklessly stupid at worst in not researching this before?</p>
  
  <p>This also raises maybe a bigger question where a package will install various other packages that are dependencies - is this cause for even more concern or is there a clear audit/security trail that I can follow?</p>
  
  <p>Apologies if I'm missing something obvious!</p>