Every project you have going, on one board your coding agents keep current and you actually read.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
Every project you have going, on one board your coding agents keep current and you actually read.