From 3aee48c0cb1df203defc20a902fe7deb76c67937 Mon Sep 17 00:00:00 2001
From: "Babacar C. DIA" <bcdbuddy@outlook.com>
Date: Wed, 2 Sep 2026 13:58:53 -0400
Subject: [PATCH] security: stop tracking .env (leaked Coinbase key), gitignore
 env files

The tracked .env carried a real Coinbase API key, public since 2020.
The key is defunct. Remove the file from HEAD and ignore env files going
forward; sample.env templates stay tracked. Note: the value remains in
git history and in existing forks until history is rewritten.
---
 .env       | 2 --
 .gitignore | 4 ++++
 2 files changed, 4 insertions(+), 2 deletions(-)
 delete mode 100644 .env

diff --git a/.env b/.env
deleted file mode 100644
index e261605..0000000
--- a/.env
+++ /dev/null
@@ -1,2 +0,0 @@
-COINBASE_API_KEY=36f37d98-ff4e-4dc4-a7c4-eb4f4119632a
-COINBASE_API_VERSION=2018-03-22
diff --git a/.gitignore b/.gitignore
index 161052b..2686e8e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,7 @@ node_modules
 typings
 dist
 coverage
+.env
+*.env
+!*sample.env
+!sample.env