How DocUp reads repositories without running them, what it stores for private repos, and how webhooks, sessions and billing are secured. JavaScript is required to use the app.