Regarding GitHub and keygens:

: Updating codebases using unaudited tools from unverified sources increases the risk of "supply chain attacks". Software License and Support Agreement - Embarcadero