It serves raw html/css/js files directly from GitHub with proper Content-Type headers
Malware gets moderated (soon publicly by a community review system).