## API keys - [ ] rotate + lock-down 3rd party keys ## Dev configs - [x] turn logging off in default config - [x] re-implement morgan config env check ## Security - [x] review security analysis - [x] take appropriate actions to resolve all recommendations # Profit 