https://github.com/codedoctor/hapi-loggly/blob/master/Gruntfile.coffee#L41 exposes your coveralls token, which is meant to be kept secret. Not the biggest issue in the world — worst case is a bad actor makes your coverage say 0% — but still not ideal.
Better approach is use an environment variable.
https://github.com/codedoctor/hapi-loggly/blob/master/Gruntfile.coffee#L41 exposes your coveralls token, which is meant to be kept secret. Not the biggest issue in the world — worst case is a bad actor makes your coverage say
0%— but still not ideal.Better approach is use an environment variable.