Code review – kickstart-next-ssg

When to use

• Before approving or merging a pull request
• Auditing changes that touch env vars, CMS integration, or user-facing HTML

Instructions

Secrets and configuration

• No real .env values or delivery/preview tokens committed; use placeholders in docs only.
• New NEXT_PUBLIC_* keys are exposed to the browser—avoid putting sensitive server-only secrets behind that prefix.

Contentstack

• Token scopes and preview settings stay aligned with README.md (preview-capable delivery token, Live Preview environment).

Security and dependencies