Over Christmas I crossed 100 users, so I was able to submit for Verification from GitHub. This means they'll go through my app & decide if it's of a reasonable enough quality to be feature more prominently in the GitHub Marketplace.
It's pretty exciting! I had to reach to security requirements (and write out a bunch of policies), but I'm pretty confident I've not missed anything to major. For the most part it's obvious stuff like "When a user requests you delete their data, you actually do it" & "you're not sharing users private data".