fix: security

Author: SRWieZ

src/Commands/BundleCommand.php

@@ -122,6 +122,7 @@ private function checkComposerJson(): bool
 
                 return false;
             }
+            // Work with private packages but will not in the future
             // elseif ($repository['type'] === 'composer') {
             //     if (! $this->checkComposerPackageAuth($repository['url'])) {
             //         $this->error('Cannot authenticate with '.$repository['url'].'.');
@@ -170,7 +171,8 @@ private function addFilesToZip(ZipArchive $zip): void
         $zip->addFile(base_path('.env'), '.env');
 
         // Add auth.json file to support private packages
-        $zip->addFile(base_path('auth.json'), 'auth.json');
+        // WARNING: Only for testing purposes, don't uncomment this
+        // $zip->addFile(base_path('auth.json'), 'auth.json');
 
         // Custom binaries
         $binaryPath = Str::replaceStart(base_path('vendor'), '', config('nativephp.binary_path'));