Downloading open-source software or public research is generally fine.
Developers sometimes leave indexing enabled on staging servers to verify file structures before deploying a full site. index of files
Use HTTP basic authentication, OAuth, or IP whitelisting for private directories. or IP whitelisting for private directories.