Comment by vidarh

The big red flag should be giving github access before signing any contracts.