Gave the repo to Claude and asked for an audit. Seems ok.