Also security can be considered later. I’ve got a bunch of ideas to do with parsing the codebase and removing anything that executes, that downloads to places outside of its directory, & related.
Happy to for the first pass to be Google repos exclusively (orgs: keras-team; tensorflow; google-research). Just to prove the concept and so you can ignore internal security concerns.