Does cheesecake_index ever actually execute any code from the package it is scoring? I want to know if it would be safe to run it against completely unknown (and therefore potentially hostile) code. --Noah