Maybe on top of existing practice? Debian packages some addons [1], I don't know do they perform audit [2] on them. [1] https://packages.debian.org/search?suit

Maybe on top of existing practice? Debian packages some addons [1], I don't know do they perform audit [2] on them. [1] https://packages.debian.org/search?suite=default&section=all&arch=any&searchon=names&keywords=webext- https://packages.debian.org/search?suite=default&section=all... [2] https://www.debian.org/security/audit/auditing https://www.debian.org/security/audit/auditing