- API Keys in Tests:
backend/test_quiz.pyandbackend/test_openrouter.pyalready useos.getenv("OPENROUTER_API_KEY")— no hardcoded keys found.- Status: Resolved. Both files load the key from the environment.
- Remaining: Ensure
.envis never committed (already covered by.gitignore) and CI injects the key via secrets.
- Backup Files:
stemly_app/lib/screens/scan_result_screen.dart.backupshould be removed from the repository. - Unused Files:
backend/test_output.txtandbackend/test_image.pngappear to be artifacts from testing that should probably be ignored or removed.
- TODO — Firebase Web Client ID:
stemly_app/lib/services/firebase_auth_service.dart:31— Replace placeholder Web Client ID with the actual one from Firebase Console.