Matthew Rowley

I am working a project that requires Open Source software to be vetted for malicious code. Has anyone ever dealt with this requirement and have a answer for the OpenG toolkit (which I use extensively) as to whether it has been inspected for malicious code certified "clean"? Thanks in advance. Matt R. Project Lead