■ curl -O http://harmful.tool/all-source-code.gz ■ Audit ALL of the source code ■ Build the "reproducible build" in a sandbox ■ Test / Run in a sandbox ■ Delete!