I wouldn't put my xpub anywhere without a full code review and there are way too many unknowns at this point after a quick glance. Like it is building from a random docker image. No thanks.

Although it takes 5 minutes to point an agent at it for the code review...