Repository navigation

Security

docs/SECURITY.md

Security

Frontend-specific guidance

Do not hardcode secrets in source files.
Prefer environment-based configuration.
Validate external URLs and API base URLs before shipping.
Avoid adding risky runtime script injection patterns.

There aren't any published security advisories