void main() {
  final login = 'https://api.example.com/login?password=hunter2';
  final upper = 'https://api.example.com/login?PASSWORD=hunter2';
  final apiKey = 'https://example.com/v1?api_key=secretkey';
  final clientSecret = 'https://example.com/oauth?client_secret=s3cr3t';
}

void main() {
  // No sensitive parameter
  final url = 'https://api.example.com/users?page=1&sort=name';
  final resetPath = 'https://example.com/account/reset-password';
  final search = 'https://example.com/search?q=token';

  // Token parameters are intentionally out of scope (magic links, OAuth)
  final magic = 'https://app.example.com/login?token=abc123';
  final oauth = 'https://app.example.com/oauth?access_token=xyz&state=1';

  // Interpolated / templated values are not hardcoded secrets
  final template = 'https://api.example.com/v1?api_key={apiKey}';
  final interpolated = 'https://api.example.com/v1?password=$password';
}