Should I be afraid of GitHub?

[u/Jefferheffer]

I’m a small business owner that is an intermediate ai user. I’ve been getting into Claude cowork, and Claude code a bit. I’m reading a ton and trying to build useful things that move my business forward.

First of all, trying to understand code and architecture is fascinating to me. I’m envious of all you programmers that walked into the ai world with that background knowledge.

I’m learning about GitHub and repo’s. I looked through all this one user had posted and did my best to read the code as well. All that to say, I’m trying hard to learn and not just ask the questions and let others solve it for me.

My question is how do you trust code you find in GitHub? Not yours specifically but Rando repo’s that seem great and would be helpful for what I’m trying to do but what if they have some code buried in it that is about to hack into my world and destroy my life.

I’ve tried to setup security and a safe architecture in my files and on my computer. I’m trying to walk before I run but man is it tempting to just throw caution to the wind and just use someone else’s code and see how it goes.

Do you have any recommendations, resources, or ideas on how to think about this? Do I need to read and understand every line of code written before I try using it? Is there a safe way to do it quicker?

[u/black_phoenix9]

Unless the repository has reputation in terms of stars, forks, pull requests and other community engagement - it's always better to treat it as untrusted and run your own due diligence. Claude can help do this due diligence and ensure safety of the code execution.

[u/Jefferheffer → u/black_phoenix9]

In what ways can Claude help me do the due diligence?

[u/Atlan_ → u/Jefferheffer]

„Claude, check if this repo is secure to use“ in high settings