[gehen88]

Is nobody concerned with the fact this tool scans your repository contents? This tool is mostly intended for use with private projects, not open source, so I would expect a LOT more scrutiny (and options) around security.

[armini]

We are working to open source our project & we also have an api integration solution for those who prefer to only share their package files.