Anecdotally this seems to happen mostly from personal experiments, not from development of open source software meant to be consumed by others. Secrets general

Anecdotally this seems to happen mostly from personal experiments, not from development of open source software meant to be consumed by others. Secrets generally are included in projects that are meant to be deployed (like a rails app, or a blog, or ...), not in thelibraries/gems/modules that make up the bulk of open source found on Github.