Buuuuut.... Notice that it appears this repo contains precompiled binaries and no obvious link to the source....

This is literally running some binary blob and giving it access to a big chunk of your digital life. If it were malicious, all it would need to do is steal the token and then upload some illegal images and your whole Google account will be permabanned.