is this repo a legit one, has anyone audited it?