Does Envato check to see if the code being sold is safe?

Good afternoon,

I am looking at purchasing some eCommerce scripts.

My question: Does Envato validate that the code being sold is safe and secure (No piping info to external endpoints, Proper handling of injections, No back doors…)?

Thanks…

Correct. It’s been checking by the reviewer team

Are the theme updates that can be automatically updated to our sites hosted and checked by envato or do updates come straight from developer servers?

It’s been checked by Envato first then the information sends to your website. If you accept the auto updates by the Envato plugin, you may have it automatically but most cases, you will need to click “update” button