I believe this is easily solved by considering why consumers care about origin so much in these times. Namely, to boycot US. So simply indicating on the product (e.g. with a us flag) whether any part of its production chain is US-based and hence will put money in US hands, is enough for consumers to make a choice about the product.

What worries me is in the last sentence. If they use GitHub which is owned by microsoft itself being a US company, couldn’t the government of the US order microsoft to take down the repositories? Wouldn’t an alternative git platform be better for this?

Gives these vibes