SEV-1: blocks launch
A database table has no row level security
What goes wrong
Anyone with your public Supabase key can read this table. That key ships in your JavaScript.
How to fix it
Add "alter table <name> enable row level security;" in a new migration, then write a policy that limits each row to its owner.
Check your app
npx sigshipRun it in your project. It reports this check as rls-missing, along with 16 others. Nothing leaves your machine.