Every example in this repository reads the Vancine API key from the environment variable VANCINE_API_KEY. The repository ships with an empty placeholder in .env.example and no real credential in any committed file.

If you believe a real API key, password, token, or other secret has been committed to this repository:

1. Do not share the value publicly (for example, in an issue or pull request).
2. Rotate or revoke the exposed credential from the Vancine console immediately.
3. Report it privately using the contact below.

To report a security vulnerability in this starter kit, please email security contact via the Vancine website. Include a concise description, the file or behavior affected, and a minimal reproduction if possible. Please do not disclose the issue publicly until it is acknowledged and resolved.

• Example code is released under the MIT License, without warranty.
• This is an integration starter kit, not a cryptographic or authentication library. Use it to make API requests; do not reuse its helpers as a general security primitive.
• The repository does not collect, store, or transmit credentials on your behalf. Keys stay in your environment and run locally.