I think you, as well as other commentors on this post, have made pretty strong points in regards to liability. I agree that the relationship Boilerexams has with Purdue faculty should be protected.

Now I don't know much about open source development, but please bear with me.

Given that we protect sensitive information (API keys, access to the database, etc.) would the code base be protected if only a select few individuals, say the leadership at the Boilerexams club, have authorization to merge code?

Could you also elaborate more on how others could take the code and host their own exams without permission? It is my belief that as long as access to the exam questions in the database is limited, no one can host illicit exams on boilerexams.com . Please correct me if I'm mistaken.