Revealing source code should not be a security problem. Open source is not less secure than closed source. If enough non-evil eye pairs read it and responsibly disclose their findings at least.

However, storing database passwords or password hashes in git (at least inside the same repo) is a major design flaw.