All examples read VANCINE_API_KEY from the environment. .env.example contains an empty placeholder only. Never commit a real API key, access token, or password.

If a credential is exposed, revoke or rotate it in the Vancine console as soon as possible. Do not paste the value into an issue, pull request, chat, or log.

Report security issues privately through the security contact on the Vancine website. Include the affected file or behavior and a minimal reproduction. Please do not publicly disclose the issue before it is acknowledged.

This repository contains client-side integration examples. It does not collect or store your credentials; the examples send a key only to the configured Vancine API endpoint when you run them locally.