It appears that this repo lacks the notion of tagging, releases, or semantic versioning. This makes it challenging to apply repoguard to the machines of an entire team of developers, since there is no guarantee which copy they will install.
The current hack is to request a specific commit hash. It would be much better if repoguard would conform to industry best-practices.
I recommend the use of git-flow to make the process easier.