Maybe it has a link with the proprietary webauthn lib that is still included in the build even though it is supposed to be excluded ? Or because the guardian project already has its own repo so it would be pointless to publish it in these two places at the same time ?