`npm-debug.log` and `client_secret.json` are still visible. You don't want people to see you secret keys (lots of damage can be done there). .gitignore them and make sure to remove them from the git history @mohanagy @ibraghada @AkramBadah