Inspect
Review the listing’s compatibility, permissions, contents, limitations and license before downloading.
Use the component. Keep the responsibility.
Nurpam packages are production-oriented references, not a substitute for reviewing your own users, data, infrastructure and threat model.
Verify
Keep the versioned ZIP, compute a SHA-256 digest, inspect its files and never execute unfamiliar scripts blindly.
Adapt
Copy only the required files. Replace example quotas, storage, identity and error handling with controls appropriate to your system.
Test
Run lint, type checks, unit tests, authentication-boundary tests and deployment checks before release.
Free package support
Free packages are provided under their bundled license. They have no guaranteed update period or response SLA. Re-download the current version from your account when a new release is announced.
Commercial scope
Premium components and services are currently enquiry-led. Deliverables, update period, support response, permitted seats and acceptance criteria are set in the signed proposal. Online checkout will be added later.
Responsible installation
- Keep API keys in server-only environment variables.
- Use atomic limits for multi-instance systems.
- Authorize inside API routes and server actions, not only at the page boundary.
- Treat model output, retrieved documents and tool results as untrusted input.
- Record necessary operational evidence without logging secrets.