You expose all your env anybody can access your database as well as use your steam key and secret

Both in frontend and backend make the repo private or delete it or rollback your commit can save you or change all the credentials
or be ready to welcome hackers  