A side project could be code, or something physical. Two diff ways about doing a security audit.
For example, One could use: snyk.io
Reply on news.ycombinator.com