Unfortunately, until Twitter implements OAuth, applications that act on behalf of Twitter users, such as Twitter Karma, require your Twitter username and password to access your data.
I promise not to do anything with your Twitter authentication data other than request your following and follower data, and I don't store your authentication information: it is used to make the necessary requests then discarded immediately.