If you find a vulnerability in TrustFirst, please use GitHub's private Report a vulnerability option for this repository when available. Include reproduction steps and the affected route or component. Please do not post credentials, personal data, or exploit details in a public issue.

Never commit .env.local, service-account keys, wallet keys, provider secrets, payment data, or user uploads. The repository's .env.example contains configuration names only.