Not OSS only, likely also the enterprise private repos, with a lot of business secrets.

Yeah this is exactly what I was thinking.