I’m not sure it makes much sense that gitea is a bit too heavy, but forgejo (a fork of gitea) runs perfectly. But forgejo appears to have more developments momentum as a project and so you probably landed on the right choice anyway. 🙂

Hm… I think if they fucked up and were negligent, this is a reasonable slap on the wrist judgement. If they fucked up, and then were knowledgeable in a malicious cover-up of their fuck up, this seems like a light punishment. The evidence seems to weigh towards the second, but the punishment gives them the benefit of the doubt on that.