> I've no idea what led to NHS England making this retrograde decision - so I've send a Freedom of Information request to find out.

Is he being naive here? They give explicit reasons for the change. I suspect the author is unaware of the wider picture here, he may be tech savvy but he does not know how to run a national health service and he's speaking way out of his comfort zone.

The author has this to say

> The majority of code repos published by the NHS are not meaningfully affected by any advance in security scanning. They're mostly data sets, internal tools, guidance, research tools, front-end design and the like. There is nothing in them which could realistically lead to a security incident.

Such repositories should not be closed due to a knee jerk reaction

Author is very much aware as author was a part of the organization and helped with the open sourcing efforts in the first place.