Every line of code has been audited by all security researchers. The implementation is language agnostic and extremely slim (0 LOC). It runs all the JavaScript I want (none).