A developer reviewed 100 popular GitHub repositories and found alarming security flaws.Hardcoded credentials were found in 37% of the repositories, exposing API keys and passwords.Some repositories had AWS credentials with admin privileges committed to public repositories.Neglecting to use environment variables or rushing to meet deadlines were common reasons for these mistakes.