I wouldn't put my xpub anywhere without a full code review and there are way too many unknowns at this point after a quick glance. Like it is building from a random docker image. No thanks.