Question about Security

[TheMuscle]

Hello, I have a question about the security of the replacetokens extension. Are there any secure coding practices followed during development, and is any code review performed? If yes, how often? Is there any contact information that can be given? I ask these questions because I work for the State of Idaho in the U.S. and I'm conducting a security review of the replacetokens extension for use. Thank you for your time.

[qetza]

Hi @TheMuscle,
I'm the only contributor (and owner) of the code so there is not much of a code review except that I reread my code to make sure it works 😄
All the code is open source, this azure pipelines task and the internal library also written by me (https://github.com/qetza/replacetokens), there's no specific secure coding practice but i try to upgrade libraries when there's a warning from github.