Comment by mapontosevenths

It would still have been less than ideal, but he might have gotten away with it if the private key wasnt stored within the public Github repo.