have jev check if code is malicious before you run it, its cheap enough to scan entire codebases can also be used as a

have jev check if code is malicious before you run it, its cheap enough to scan entire codebases can also be used as a first line defense against malicious prs https://github.com/luantak/is-malicious