> beware if your open source project needs a single private repository to share passwords
Passwords emphatically do not belong in git.
Your private repos should be maintained such that accessing them would not compromise your security.
Passwords emphatically do not belong in git.
Your private repos should be maintained such that accessing them would not compromise your security.
Let me brig another example for OSS projects that could need a private repository: branches for security fixes that are not public yet.
A private git server would probably be better for that, but also wouldn't cost $0.