f5xc-auth

The library demonstrates strong security practices. It uses XDG-compliant directories for profile storage, enforcing secure file permissions (0o600 for profiles, 0o700 for config directories). Critical path validation is implemented in `src/utils/path-security.ts` to prevent directory traversal attacks, including checks for null bytes and `..` patterns, before reading sensitive files (P12 bundles, certificates, keys). TLS verification is enabled by default, with explicit warnings printed to stderr and logs if `F5XC_TLS_INSECURE` is set. API tokens are masked in logs. Credentials are sourced from environment variables or profiles, avoiding hardcoding. The overall design prioritizes secure handling of sensitive information and file access.