Feedback GitHub users are unwittingly leaking paid assets and pirate bots are forking them

That's not strictly an Unity issue, but because the Unitypackages are unpacked into Assets, it's the user's responsibility to ignore them from version control. This means that effectively a staggering number of them are being published into public repositories by beginners who don't realise the danger.

In turn certain kind of bots (or dedicated invidiuals, possibly) find them and fork them so they can't be deleted. The number of devs at the risk of litigation is pretty incredible since the account had forked hundreds of assets in just a couple of months.

I think it's so widespread and happens so easily that it should be addressed somehow. Maybe add to gitignore automatically from package manager? Force UPM as the standard for licensed packages? I'm not sure

 

Maybe extract assets into a folder that's automatically ignored that's not normally used by custom development. Like Plugins or AssetStore.