How GitHub maintains compliance for open source dependencies | Inshort Stories