Which card to use, what your points are worth, and whether each annual fee earns its keep.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
Which card to use, what your points are worth, and whether each annual fee earns its keep.