TODO: the cost of reading all the code in my dependency graph would be ruinous. But an LLM could probably handle, but the costs would probably be $10 of tokens per package.
(Thinking more about this-- I'd have to flag all compiled code as malicious because decompiling is ruinously expensive)