I don't think that reading through millions lines of code is a sane idea. Therefore I suggest an alternative to author's opionion: - select a Linux distributio

I don't think that reading through millions lines of code is a sane idea. Therefore I suggest an alternative to author's opionion: - select a Linux distribution one can trust, like Debian - throw away your Node.JS and switch to PHP. We have frameworks like Symfony made by a company that can be trusted and that has proper code review processes so you don't have to worry that tomorrow there will be a backdoor Another alternative would be a community code review. Everyone using OSS code can contribute some time for a review of the project they like the same way they contribute the code. Reviewing is even easier than writing a code. Then they sign the lines they have checked. It would also help to find poorly written, difficult to understand code and find unreliable code that can contain vulnerabilities. The companies using OSS code could be interested in this. They would prefer to use the code checked by other corporations rather than the code that has never been reviewed. And they probably are already doing the reviews privately so it wouldn't cost them anything.