Well, you can at least limit it to only seeing your public repos and not the private ones[0]. Of course, that doesn't negate the fact that should the developer

Well, you can at least limit it to only seeing your public repos and not the private ones[0]. Of course, that doesn't negate the fact that should the developer have coded the app to modify your code, you can't do anything to stop them. [0] http://c.thisishugo.com/1bPz7+ http://c.thisishugo.com/1bPz7+