This was something I learned when owning even a moderately successful github app. There are a lot of bad actors out there, who end up in your inbox monthly, as

This was something I learned when owning even a moderately successful github app. There are a lot of bad actors out there, who end up in your inbox monthly, asking to "acquire" your app for a small sum of money. I would bet some if not all were looking at it as a juicy attack vector against my users.