One run is noise, so this reports the median of several distinct PageSpeed analyses and the spread.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
One run is noise, so this reports the median of several distinct PageSpeed analyses and the spread.