Wouldn't this expose your github token to anyone in the frontend?