Thread:Project:Support desk/Putting the wiki files on github/reply (2)

What about deactivated extensions on the system? If they are deactivated, you won't see them in Special:Version, but their code still is there and might contain vulnerabilities.

And for skins: When you use a modified version of a skin or an own skin, then you might have introduced sexcurity issues there, which no one will know of, when you do not publish the source.