Final security audit note for v1.0.9:

This package intentionally contains no 0x API key and no LI.FI API key.
API keys must be stored only as Cloudflare Worker secrets.

The package intentionally contains no .env, .pem, .key, private key, seed phrase, wallet file, localhost endpoint, dApp browser page, or manual VIGIX override.

The extension is ready for production-side worker configuration, but live 0x/LI.FI routes will only work after the Worker endpoint is deployed and saved in More > Swap routing engine.
