the code needs to be scanned/tested for security flaws before this blueprint is marked as done.
code needs testing to see if there are actually any security flaws.