We are planning to use react-sdk component from market place https://community.pega.com/marketplace/component/react-sdk.

As a part of that we also need to use the code provided by Pegasystems on github : https://github.com/pegasystems/react-sdk/tree/main

As a part of security assessment internal for our client, we need to know if this git code is scanned for any vulnerabilities and malwares ?

If yes, what type of scanning is performed ?

Is there any documentation that provides an assurance that the code is scanned and made available to public on the internet ?