Forensic reality checks for open-source bounties. Free scanner; paid manual due diligence.