There’s some poor coding areas, plainly, like API keys really hard coded in the code, config files not up to speed, but yeah, but I would just say if you have a adverse intent to use that information, it’s not likely to do the job out for you. I don’t consider there is imminent danger, if somebody thinks there is imminent danger, drop me a note, but Keycloak most up-to-date edition seems really reliable. Somebody questioned me Dutch.