> Yes, but good luck getting that through any form of code review. do you think more than a few percent of the "foundational" OSS projects where we find all th

> Yes, but good luck getting that through any form of code review. do you think more than a few percent of the "foundational" OSS projects where we find all the classical CVEs have any code review process ?