I think it's deeply disadvantageous and legally dubious to accept code for which you don't know its provenance.