Floot Env Exposure Audit

Listing: GCD-FLOOT-046 · Version: 1.0.0 · Price: Free

1. Read README.md and LICENSE-NOTICE.md.
2. Copy the source into tooling-only code you control.
3. Run npm test; expect 14/14 tests passed.
4. Run npm run example; review only redacted findings.
5. Scan authorized source and manually verify every finding, skipped file, build boundary, source map, log, response, and deployed bundle.

Important: This package performs bounded static pattern analysis. It does not read a host environment, rotate credentials, inspect history or bundles, modify code, or certify security. If a real secret may have been exposed, revoke and rotate it immediately.

Rollback: remove the copied auditor and any tooling-only invocation, then revert build-script changes through version control.