It's not open source? The repository doesn't seem to include the Rust source code.
Being closed source, I have no reason to believe it isn't malicious. Open source means auditable. Closed source means "trust me bro".
Edit: nevermind, I think I found the right repo. The package links to another one. Might want to fix that. Also, your profile on GH says it's still closed source.