Idk if I'm just too cautious, But the GitHub OAuth scope requests write access to public repositories including settings, webhooks, and deploy keys. I wanna check my rank but that level of access is scary