for comparison/contrast, another very related Google project (one employee) on one of their github orgs that comes with the following disclaimer
> This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program.