I think GP is talking about the case where the company hosts its code in a private repo.