It's quite calm. I have a custom quality gate that doesn't let certain stuff into my stack that's famous for having security issues. I generally skip on most javascript and PHP stuff for example.