Comment by bukinoshita

To the file where is calling `npm-donate`. But instead of hard code the API Key, you use some sort of dotenv to hide the API key from the end users.

When users install your package, they won't see your API key.