Can we sanitize `$reo['repo_id']` here and cast `$can_update` to a bool just to be safe?