I only maintain my own codebases, so my deepest commiserations my fellow.
I’d imagine I’d just want to turn repo’s private or gate who has access, that’s my default response.