a platform that hosts the repos and issue trackers is different tool.
Security is the main problem here, you normally don't visit a random host to download the software from, just like you don't put money on a random unknown bank/stock. That's the reason I think it is not being federated yet, bc you want to stick with the trusted instance you pick anyway even if it is federated, but then there is not much difference for the host to host the platform without fediverse.
Git is distributed, but
so do many vcs created after git, eg. hg, pijul
a platform that hosts the repos and issue trackers is different tool.
Security is the main problem here, you normally don't visit a random host to download the software from, just like you don't put money on a random unknown bank/stock. That's the reason I think it is not being federated yet, bc you want to stick with the trusted instance you pick anyway even if it is federated, but then there is not much difference for the host to host the platform without fediverse.