Please report security issues privately instead of opening a public issue.

This portfolio should stay static and dependency-free. Do not add tracking scripts, private customer data, API keys, or production credentials.