this question is kind of a catch22: you shouldnt be asking us and should be vetted every open source project you use. If we say: its all good bro, are you not going to check yourself?
What's catch22? I hear this reference a lot lately...
I don't have the skill to vet it myself hah so would have to rely on some existing mechanisms I was just wondering how often people do actually thoroughly audit OSS for malicious code
Обсуждают сегодня