Please forgive my ignorance. Is it right if I say the password seems to be available on the client side?
import { connect } from '@planetscale/database'
const config = { host: '<host>', username: '<user>', password: '<password>' }
import { connect } from '@planetscale/database'
const config = { host: '<host>', username: '<user>', password: '<password>' }
The idea is these runtimes typically only allow HTTP outbound requests, not whatever protocol is typically used to connect to a planetscale db.