Repository "security assessment" and "usage guide"

[nimaghoroubi]

Hi, I have been looking at this repo and reading online a bit about open source security and I have some big projects im trying to work with and im concerned about their security. I am thinking with a good prompt structure and some CLI magic, does it make sense to:

clone the repo in question
go through it with pure code and get some insights on size, length etc etc for measuring if its going to hit limits
have either a local model (ollama, to circumvent limits) pre analyze it, and then fully analyze it online with lets say gpt4o or similar
get feedback and code update suggestions
set the model to act as a dev, interactively working towards understanding the code
sorry for the long question but i think this could be very VERY helpful when it comes to using a new open source repo and wanting to understand it, both from security perspective and how it works. I can contribute to this if its not already in the pipes potentially.