codeberg might be a good candidate. Slightly tangentially, to facilitate mobility and cross-server collaboration and repo syncing, Gitea (which they're built on) is getting federation in place
But after Codebergs Terms of Use, "Forks, migrations and testing repos are considered as inactive when they don't contain unique contributions and are inactive for more than a month. They shouldn't be kept for a prolonged amount of time, and thus might be removed after notifying maintainers and providing a 90 days period to ask for preservation."
Also "You are legally responsible for your edits and contributions on the platform, so for your own protection you should exercise caution and avoid contributing any content that may result in criminal or civil liability under any applicable laws (e.g. copyright and patent infringements, but also things like age-restricted content without age confirmation). Both the German legislation and the legislation in your country of residence may be relevant here."
Codeberg is a registered organization and also has to act on copyright infringements...
Legal part: Very good point - I would have assumed from a first look-through of the repos that it's legally clear but IANAL nor German so it should be taken into consideration when choosing where to host.
Activity part: Given the popularity of the project and Codeberg seeming to be quite approachable, I would assume it would not be an issue.
And, a major point of federation is to facilitate a more traditional and decentralized workflow where a takedown at a single host is not too disruptive for the project.
Maybe not, but MS does follow the DMCA takedown process.
> "If the notice alleges that the entire contents of a repository infringe, or a package infringes, we will skip to Step 6 and disable the entire repository or package expeditiously." [0]
This is what was going on with some Grand Theft Auto mods[1] and youtube-dl [2]
So does everyone else. Only self-hosted gives you the ability to ignore DMCA takedowns because the same entity is taking liability for either not following a dmca or performing the actual copyright infringement.