In a non-profit that I collaborate with [1] we use private repos to keep the server setup and some tickets that contain sensitive information (user data). All other code is open source. Obviously we don&#x27;t want to keep api keys etc. in the public repos.<p>[1] <a href="https:&#x2F;&#x2F;github.com&#x2F;sozialhelden&#x2F;wheelmap" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;sozialhelden&#x2F;wheelmap</a>