Any AI tool to analyse a git repo for malicious code?

cross-posted from: https://discuss.tchncs.de/post/21298994

I'm trying to feel more comfortable using random GitHub projects, basically.