frontend/app/api/open-classrooms/route.ts exposed route

[mdgdeveloper]

const response = await fetch(
            "<<removed>>",
            {

Instead of that, you should use env variables in NextJS

[vasu2912]

Also, There is an Exposed API for in spots/backend/app.py, University API, which I think also Unnecessary, and should be removed.