- Never commit Relivio project API keys.
- Keep
X-API-Keyvalues in local environment variables, secret managers, or deployment-specific configuration outside source control.
If you find a security issue in this SDK or in the way it handles credentials, report it privately to the maintainer instead of opening a public issue with sensitive details.