Ask HN: How To Secure My Open Source Repo

I'm getting ready to make public a few of my private repos. I have various things from scripts to libraries to routers and website clones.

I'm just wondering what security concerns I need to cover before making these repos public?

-I never directly enter my Amazon AWS credentials -I've removed Heroku credentials of all kinds -I've removed most of my site-specific syntax just in case.. -Removed database credentials

Any other "gotchas" that I should worry about?

Do you have any experiences with people doing malicious things to your open source projects?