Review the scoping of all functions to be public or protected (or, rarely, private). (As part of CO-112, functions were set to public by default, or not scoped at all (implying public).)