Permissions requested by the app:
Code, Issues, Pull requests, Wikis, Settings, Webhooks and services, Deploy keys
Surely you should only need access to Notifications? A notification app should not require access to my settings, deploy keys and code.
manifoldco