Developers write far more legally consequential prose than they think, and almost none of it is code. It's the SECURITY. md in the repo root.
Source: [Dev.to](https://dev.to/sonia_bobrik_1939cdddd79d/the-most-dangerous-file-in-your-repo-might-be-securitymd-5e52)