Why would you have to install it yourself? If it's open source why not share the code to be reviewed, could become a community powered exchange.