I don't see the connection. As I said, many companies require a review/sign off for each dependency (version). Since they usually can't get them externally, th

I don't see the connection. As I said, many companies require a review/sign off for each dependency (version). Since they usually can't get them externally, they have do it internally. Enterprises also throw a lot of money at support contracts they never use, there is absolutely space for auditing expenses that give assurance and will be more thorough than any internal process.