How would this happen if you kept the repo private? Private repos are free now and most of my toy stuff is private (maybe shared with a friend I happen to be working on it with)