Risk Scanner

Tip: set GITHUB_TOKEN env var for higher rate limits when scanning public repos.