Edit: wow, I looked at the repo and there is no source, just points at a release download. I would call that straight up abuse of GitHub.
I also have another open source repo with several releases at ~40MB per release.
If the repo starts to get really large, then yes, I should host it somewhere else. But, putting it into perspective, I just released an initial MVP, and the repo size is less than 5MB in total.
This is really inflammatory. GitHub explicitly allows publishing release artifacts without source - if GitHub considered this abuse they could make it so compilation had to occur as a github action such that the artifact is guaranteed to be compiled from the source as it exists within the repo. As it is users can push any old binary up and claim that it was built with the code in the repo.
https://docs.github.com/en/repositories/releasing-projects-o...
If the repo is public, it's highly suspicious that you're serving malware. Even if not, it doesn't match a sensible git workflow. You wouldn't run a private repo with a README and no source code with some binary links. That's not a sensible way to do any project, open or not.