Hacker News Reader

I am the author of it, this is indeed too much, will remove the unnecessary scopes, the software needs to read the contents only.

I changed the scopes and removed: email and private repos.

Why still require write access to public repos if it's only reading?

This is default behaviour for OAuth apps in github. I will have to migrate to Github Apps for more fine-tuned access.