Skip to content

[Security]: Personal image file (218452820.jpg) committed to the repository root — should be removed from version control #340

Description

@prince-pokharna

Summary

The repository root contains a file named 218452820.jpg — which appears to be a personal profile photo, likely the maintainer's GitHub avatar image (GitHub user IDs follow this numeric format). This file has no functional purpose in the codebase and should not be version-controlled. Additionally, a file named aethercode.png also exists in the root with no apparent usage in the project's HTML or CSS files.

Problem

  • 218452820.jpg appears to be a personal identity-related image (named after a GitHub user ID) committed to a public repository. This unnecessarily exposes personal data in a version-controlled public record.
  • Binary image files committed to a Git repository inflate the repository size permanently — even after deletion, the binary remains in the Git history unless a rebase/filter-branch is performed.
  • The aethercode.png in the repository root is not referenced by any file in public/ based on the project structure, suggesting it is also stray uncommitted work or an unused asset.
  • The cookies.txt file is also present in the repository root. Even if it contains no real session data, a file named cookies.txt in a public repo sends the wrong signal to users and security researchers auditing the project.

Impact

  • Inflated repository clone size for every contributor.
  • Potential privacy concern with a personally identifiable image file in a public repo.
  • cookies.txt in a public repo may alarm security-conscious contributors or users even if it contains no sensitive data.

Proposed Fix

  1. Remove 218452820.jpg, aethercode.png, and cookies.txt from the repository root.
  2. Add entries to .gitignore to prevent accidental re-commit of these file types:
    Personal/stray files

*.jpg
cookies.txt

(Or scope this more specifically to the root if images are needed in public/.)

  1. Optionally, purge from Git history using git filter-repo to fully remove the binary from all past commits, reducing clone size.

I am happy to handle the cleanup, update .gitignore, and submit a PR. Could you please assign this issue to me?

Labels: bug, security, cleanup, good first issue, GSSoC 2026

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions