If you open a PR to a GitHub repo, all of its commit hashes become available to the parent repo. This is what most likely happened here (can't confirm due to the fact that it's already deleted), and did happen when the youtube-dl source became available from the dmca repo.