A Google vetted source allowing code that compromises the end user? That’s simply not possible. The developer had to provide an ID to publish the code. It MUST be safe! /s