Is it safe to just share my main password with a freelancer?

No, create a separate account with only the access their task needs, so you can revoke it cleanly when the work ends without changing your own password.

What should I do when a project ends?

Remove the developer's account entirely rather than just changing its password - a disabled account can sometimes still be re-enabled if it is not actually deleted.