The audit is finished, overall things look good. I sent them two pull requests to slightly improve security and found one borderline maybe-security-issue-maybe-bug that I'll be talking to upstream about. I've started the whitelisting, and a submission is on its way. Once it is through, the rpmlint errors in Factory should be gone. More information about the process is at [1]. 1: https://en.opensuse.org/openSUSE:Package_security_guidelines#How_the_Whitelisting_Process_Works