This is a soft-question in that the answer will necessarily either include a probabilistic break-down of likely sources, or it will be speculative.
However, I am curious to know what automated (bots), possibly exploitative or other sources can be behind some 10 clones over the course of 1 or 2 hours of a newly created GitHub repository without any followers, forks or name recognition of the account.
The clones came at different times (no clusters) from very different countries. No URL was attached to them, or recorded.
The number of views was very low.
