Hacker News Reader

Nice tool, however if I am correct you are calling the Google generative language API directly, your API key is exposed to the client (the browser).

If you have no spending limits, this is a very (very very very) bad idea.

damn, I can't stress this enough. You publish a key be prepared for millions on dollars of issues.

Yes, exactly. Google seems to be calm in this regard luckily as far as i know though.

OP please revoke the key ASAP

Done. Thanks both of you for pointing out my obvious mistake

Thanks a lot man. I totally missed it lol. Just fixed it.