deepgram-enterprise-rbac

No evidence of intentional malware or supply-chain compromise is present. The code implements legitimate RBAC and Deepgram key-management functionality, but has security and reliability concerns: authorization boundaries for team/project operations are not shown, arbitrary project identifiers and roles require validation, key expiration is not persisted, and rotation can cause downtime. The returned plaintext API key and privileged admin credential require careful operational protection.