We have a headline-level security notice from github: https://github.com/evil-mad/robopaint/network/dependencies