RMR: WAS Node Suite v3.2.2
Since manual review process closed I was able to get the full report, and where applicable, have made sweeping revisions to pack. After polling workflows in the wild I decided to retire a few nodes as apposed to deprecation. I've also implemented a few systems into the build process that verifies upstream vendor code, that being said, vendor code is vendor code, and out-of-bounds to modify extensively and chain-of-trust should be considered.
To help the manual review process I have a report written for the security angle of the pack, which also points out lockdowns, and non-active detections.
https://github.com/WASasquatch/was-node-suite-comfyui/blob/main/SECURITY.md (the SECURITY.md itself was flagged, as a non-executable file hehe).
Source: Comfy-Org/ComfyUI-Manager