> Do Linux distros actually audit packages very much? It varies widely depending on the distro. Debian is the the most strict on review process but also on sc

> Do Linux distros actually audit packages very much? It varies widely depending on the distro. Debian is the the most strict on review process but also on screening the volunteers doing the work. Yet, most popular distros has been very effective at blocking a large number of supply chain attacks over the last 20 years.