So you expect other communities to review all code changes? No way. This would be a huge time sink, and so far has never worked in the past. This only works fo

So you expect other communities to review all code changes? No way. This would be a huge time sink, and so far has never worked in the past. This only works for very narrow-scoped projects, where the reviewers are also part of the project. Thinking or OpenBSD, Qt or other projects where peer-review is part of their internal structure. So if other communities were to sign the releases, this would have to be automatic or semi-automatic. It would not be a review, but it would be still helpful, since those external observers then can see all releases in hindsight. So maybe years later some people are finding stuff and can trace it back to the point in time and the exact update by which it was introduced.