All fixes

Remove a public .git directory

exposed-git

Your .git directory is readable over HTTP, so anyone can reconstruct the full source history along with every secret ever committed to it.

Why this matters

Your .git folder is publicly accessible. Someone could download your entire source code, including any passwords or secrets you've ever committed. Remove it from your web server.

Vercel

  1. 1 .git should not be in your build output
  2. 2 If exposed, check that your build command doesn't copy .git to the output

Does your app still have this?

Scan your domain