&gt; beware if your open source project needs a single private repository to share passwords<p>Passwords emphatically do not belong in git.<p>Your private repos should be maintained such that accessing them would not compromise your security.