What is the best way to store Gmail API client id and secret in Electron.js apps?

I have an app built on Electron.js which uses Gmail's Node.js API to authenticate. I have a doubt that is it safe to publish an app with my client id and secret along with the package. I know using API keys is not. Can someone guide me on the right way for this?