$SOURCE is passed to curl -s -- why does it include curl -s itself?
github now hosts content on a different domain, to prevent XSS