Only the latest released version of @fransiscuss/ampeco receives fixes.

Please report security issues privately through GitHub Security Advisories rather than opening a public issue. Expect an initial response within 7 days.

This is an unofficial, community-maintained SDK. Vulnerabilities in the AMPECO platform itself should go to AMPECO, not here.

An AMPECO API token authenticates as the admin that created it, so it is a server-side secret:

• Keep it in environment variables or a secrets manager, never in source control.
• Never ship this package with a token into browser or mobile client code.
• AmpecoApiError exposes the raw response body so failures can be diagnosed. Redact it before forwarding an error to a log aggregator or issue tracker.