[der_gopher]

I am the author of it, this is indeed too much, will remove the unnecessary scopes, the software needs to read the contents only.

[der_gopher]

I changed the scopes and removed: email and private repos.

[nikeee]

Why still require write access to public repos if it's only reading?

[der_gopher]

This is default behaviour for OAuth apps in github. I will have to migrate to Github Apps for more fine-tuned access.