This repository is a portfolio project and receives maintenance updates on best effort.

If you discover a security issue:

1. Do not publish it publicly first.
2. Open a private communication channel with the repository owner.
3. Provide reproduction steps, impact, and suggested mitigation.

Security posture relies on:

• frequent pnpm lockfile updates
• production dependency auditing
• CI checks using pnpm audit --prod

Run locally:

pnpm run audit:all

• Environment-specific endpoints through .env files
• No hardcoded remote URLs in production configuration
• Mandatory CI checks on pull requests