docs: Clarify `nil` `http.Client` usage has no timeout by merchantmoh-debug · Pull Request #3910 · google/go-github

bot and others added 2 commits

January 11, 2026 12:59
Adds a warning to the `NewClient` function documentation to inform developers that the default `http.Client` (created when passing `nil`) has no timeout, which can be a security risk in production environments.
…rovement-10999790790030565127

Add security warning to NewClient documentation

@gmlewis gmlewis changed the title bclient-improvement docs: Clarify nil http.Client usage has no timeout

Jan 11, 2026