Security
Security habits I repeat on every new repository
Least-privilege secrets, dependency updates, and safe defaults in auth and uploads close the obvious holes before attackers ever bother prob