It does not get vetted by any reviewer or security scanner. It has no package manager to constrain what it can do.