While the server-side components may never become open-source or auditable (significant portions are based on existing, closed systems), the client-side code is

While the server-side components may never become open-source or auditable (significant portions are based on existing, closed systems), the client-side code is easily auditable. If you have a chance, I would love to see what you would find by analyzing https://github.com/STRML/Healthcare.gov-Marketplace https://github.com/STRML/Healthcare.gov-Marketplace. If you get a chance to look at it, please submit a PR.