I don't know anything about regolith but if you are a distro that does theming, then you should do the QA yourself. Yes, that means you have to check every sing

I don't know anything about regolith but if you are a distro that does theming, then you should do the QA yourself. Yes, that means you have to check every single package every single time it gets updated. When I think about the scale of the problem I get the impression that only a commercial company that earns money would have the resources to do this. There is no way in hell you can get enough volunteers to do this in a reliable way.