We can add dependencies through SPM providing GitHub repo URL. Is there some way to hide source code?

Nope. See SPM Support for Binaries Distribution.