Maybe from a company like Glassdoor. The developer could store its credentials in some environment file or something.