This repository is an educational sample. It uses synthetic, generated data only and contains no secrets, API keys, tokens, credentials, private URLs, or proprietary data.

If you discover a security issue (for example a leaked secret accidentally committed, or an insecure dependency), please open a GitHub Security Advisory or a private issue rather than a public one, and allow reasonable time for a fix before any public disclosure.

• No real credentials, API keys, or tokens
• No connection strings with secrets
• No .env files (use .env.example placeholders only)
• No proprietary or personal datasets

Dependencies are restored from the public nuget.org feed only (see NuGet.config). Run dotnet list package --vulnerable to audit.