To improve our code quality and security, we want to reject non-executable files which have execute bits (basically marks that tell the operating system it can run this file) set via a build check. In Wikimedia we have a utility called MinusX for this. Related: T168659: Reject non-executable files with execute bits with a build check
So we need to add MinusX to most MediaWiki extensions and PHP library repositories.
https://gerrit.wikimedia.org/r/#/c/377710/ is an example change for MediaWiki's Scribunto extension which shows what needs to be done.