Jim has been running source scan and we need to fix the security bugs they found. We should also investigate bringing in a github action for sourceclear.