> The only real solution is to do very careful code reviews. Are there any projects that are well resourced enough to do this consistently, including all depen

> The only real solution is to do very careful code reviews. Are there any projects that are well resourced enough to do this consistently, including all dependencies?